<div data-id="1-1.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.1 Purpose and Scope of this PSL</div>

<div data-id="1-1.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.2 BSC Provision</div>

<div data-id="1-1.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1.3 Acronyms and Definitions</div>

<div data-id="1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">1 Introduction</div>

<html><head></head><body><div data-id="2-2.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.1 <u class="defined-term">System</u> Availability</div></body></html>

<div data-id="2-2.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.2 Service Availability</div>

<div data-id="2-2.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2.3 Backup and Disaster Recovery</div>

<html><head></head><body><div data-id="2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">2 Service and <u class="defined-term">System</u> Availability</div></body></html>

<div data-id="3-3.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.1 Physical and Logical Security</div>

<div data-id="3-3.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.2 Security of Hardware Access</div>

<div data-id="3-3.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.3 Security of Software Access</div>

<div data-id="3-3.4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3.4 Access Controls</div>

<div data-id="3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">3 Security/Access</div>

<div data-id="4-4.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4.1 General</div>

<div data-id="4-4.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4.2 Access to Non-Computerised Records</div>

<div data-id="4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">4 Data Confidentiality</div>

<div data-id="5-5.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.1 Operational Controls</div>

<div data-id="5-5.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.2 Retention of Records</div>

<div data-id="5-5.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.3 Processing Continuity - Risk</div>

<div data-id="5-5.4" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.4 Processing Continuity - Impact</div>

<div data-id="5-5.5" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5.5 Interface Controls</div>

<div data-id="5" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">5 Processing</div>

<html><head></head><body><div data-id="6-6.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6.1 Change Control – Qualified <u class="defined-term"><u class="defined-term">System</u></u>s<a class="sdfootnoteanc" name="sdfootnote2anc" href="#sdfootnote2sym" data-footnote="This section is not applicable to <u class='defined-term'>LDSO</u>s, except when operating as a <u class='defined-term'>SMRA</u> or UMSO"><sup>2</sup></a></div></body></html>

<html><head></head><body><div data-id="6-6.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6.2 Change Control – All <u class="defined-term">System</u>s</div></body></html>

<div data-id="6" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">6 Change Control</div>

<div data-id="7-7.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7.1 Data Transfer Network<a class="sdfootnoteanc" name="sdfootnote3anc" href="#sdfootnote3sym" data-footnote="This section is not applicable to CVA MOAs"><sup>3</sup></a></div>

<div data-id="7-7.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7.2 <u class='defined-term'>Communication</u> and Transmission Controls</div>

<div data-id="7" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">7 <u class='defined-term'>Communication</u>s</div>

<div data-id="8-8.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">8.1 General</div>

<div data-id="8" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">8 Requirements for Controls</div>

<div data-id="9-9.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">9.1 General</div>

<div data-id="9" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">9 Processing Auditability</div>

<html><head></head><body><div data-id="10-10.1" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.1 Provision of Data to BSCCo and Associated <u class="defined-term">Supplier</u>s</div></body></html>

<div data-id="10-10.2" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.2 Provision of Data for resolution of Trading Disputes</div>

<div data-id="10-10.3" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10.3 Provision of Data - General</div>

<div data-id="10" style="margin-left:0.39in;text-align:justify;text-indent:-0.39in">10 Provision of Data</div>

CONTENTS

Party Service Line 100: Generic Requirements for BSC Parties and Party Agents V3.0

Defined Terms

Cross-references