HSCN Supplier Workshop – 16 June 2016 Technical and Security Obligation Workstream Presenters: Tony Beadle / Kate Gill / Michael Bowyer

Key changes / current working model for solution: Feedback on V1.5 published; ongoing discussion over outstanding issues scheduled for all issues tracked and documented HSCIC agreement for HSCN standards compliance being drafted for publication this week Ability for suppliers to self assert, meeting good industry practice for network services, security and incident management. Designed to help SMB vendors to become fully compliant with best industry standards over a two-year period Supported with a program which is proposed to be run by Innopsis to help guide any HSCN supplier through the complete process. Key outstanding areas: IP addressing and Interconnectivity still outstanding pending agreements and discussion – papers in train for review Security obligations being re-written in V2.0 to reflect supplier capabilities and agreements in previous workshop Next Workstream workshop on 30 June primarily to close out Security questions

Key changes / current working model for solution: Change of DLN’s and AC-SP’s to “Consumer Network Service Provider” For AC-SP’s additional obligations (from V1.5) will apply as a result, as all providers will need to meet the set of obligations.  Replacing DLN’s peering obligation with a Hybrid PSN / Peering Model This will have certain Service Management obligations and capabilities which need to be met, being documented.  This is the preferred method of interconnectivity for all Consumer Network Service Providers though we are not preventing providers obtaining connectivity to HSCN from another provider if this makes commercial sense for them. Consumer Network Service Providers will need to identify from the Obligations in 2.0 which aspects they cannot meet (e.g. ISP provision with managed firewalls etc.) and seek wholesale arrangements with other providers who can

Key Interdependencies and Cross Over Areas Service Management Data requirements to be met by supplier provided portal (or other) Work in progress to identify what is required for Service Management and any impact on technical and security work stream Hybrid PSN / Peering Model solution proposal Will need to be impacted by Service Management Workstream for changes to their obligations Commercial delivery vehicle will be determined by HSCIC and will impact Governance and Commercial Workstream Requires changes to PSN compliance and governance which is agreed in principle by PSN team but will need to be formally documented

Security - Key Topics Tony Beadle