{"id":627,"date":"2026-01-26T13:34:26","date_gmt":"2026-01-26T13:34:26","guid":{"rendered":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/?page_id=627"},"modified":"2026-01-26T13:34:26","modified_gmt":"2026-01-26T13:34:26","slug":"how-we-investigate-and-handle-breaches","status":"publish","type":"page","link":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/","title":{"rendered":"How we investigate and handle breaches"},"content":{"rendered":"

This page explains how we identify potential breaches, who we contact, and how we communicate and follow up with DIP Users.<\/p>\n","protected":false},"excerpt":{"rendered":"

This page explains how we identify potential breaches, who we contact, and how we communicate and follow up with DIP Users.<\/p>\n","protected":false},"author":353,"featured_media":0,"parent":605,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","inline_featured_image":false,"footnotes":""},"tags":[],"class_list":["post-627","page","type-page","status-publish","hentry"],"acf":[],"semantic_search":{"post_id":627,"title":"How we investigate and handle breaches","link":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/","categories":[],"tags":[],"content":"

\n\n\t\t\n\t\t
\n\t\t\t
\n\t\t\t\t
\t\t\n\t\t\t\t\t

This page explains how we identify potential breaches, who we contact, and how we communicate and follow up with DIP Users.<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\n\t\t

\n\t\t
\n\t\t\t\t\t\t\t

What counts as a breach
<\/div><\/h2>\n\t\t\t \n\t\t\t
\t\t\n\t\t\t\t

A breach is when a DIP User does not meet one or more of its obligations under the DIP Rules or related requirements. Examples may include:<\/p>\n

    \n
  • not sending required data flows, or sending them late<\/li>\n
  • sending incorrect or incomplete data<\/li>\n
  • not following agreed processes or technical standards<\/li>\n
  • breaching security or access requirements<\/li>\n<\/ul>\n

    The DIP Manager assesses each potential breach on a case\u2011by\u2011case basis, taking into account its severity and impact.<\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t

    \n\t\t
    \n\t\t\t\t\t\t\t

    How we identify potential breaches
    <\/div><\/h2>\n\t\t\t \n\t\t\t
    \t\t\n\t\t\t\t

    The DIP Manager uses several reporting methods to identify different types of breaches:<\/p>\n\n\n\n\n\n\n\n
    Method<\/strong><\/td>\nWhat does the report entail?<\/strong><\/td>\n<\/tr>\n
    DIP Performance reporting<\/td>\nDIP Performance reporting allows the DIP Manager to see total volumes of messages in ingress and egress. It can be filtered by DIP ID, interface and time.<\/td>\n<\/tr>\n
    Migration reporting<\/td>\nWhen there is a significant number of recipient failures or when latency threshold is breached DIP Manager will receive a report with a breakdown of all messages in ingress and egress. This will be for the period of six to seven pm. This contains the number of messages accepted and number of messages rejected as well as what is the reason.<\/td>\n<\/tr>\n
    Daily IF 21 reporting<\/td>\nDIP Manager receives a daily IF 21 report which has the number of messages in both ingress and egress, grouped by DIP ID. This contains the number of messages rejected at ingress\/egress.<\/td>\n<\/tr>\n
    DLQ Monitoring<\/td>\nDIP Manager receives an automated report with the number of messages in the DIPs dead letter queue (DLQ).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t

    \n\t\t
    \n\t\t\t\t\t\t\t

    Who is contacted when a breach is identified
    <\/div><\/h2>\n\t\t\t \n\t\t\t
    \t\t\n\t\t\t\t

    When a breach is identified, the DIP Manager will contact the relevant DIP User(s), depending on the risk category involved.<\/p>\n

    A risk category is a high-level grouping that organises similar types of risks into logical themes and shows which user roles are linked to each category.<\/p>\n\n\n\n\n\n\n
    User Role<\/strong><\/td>\nRisk Category<\/strong><\/td>\n<\/tr>\n
    User Admin<\/td>\nConnection and Operation<\/td>\n<\/tr>\n
    Certificate Admin<\/td>\nTechnical<\/td>\n<\/tr>\n
    Message Admin<\/td>\nSecurity<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t
    \n\t\t
    \n\t\t\t\t\t\t\t

    How the DIP Manager communicates about issues
    <\/div><\/h2>\n\t\t\t \n\t\t\t
    \t\t\n\t\t\t\t
    \n

    Initial request<\/h4>\n

    When a potential non\u2011compliance is identified, the DIP Manager will ask the relevant DIP User to investigate. The request will include:<\/p>\n

      \n
    • a description of the issue<\/li>\n
    • the expected timeframe for a response (set case by case, based on the severity and urgency of the issue)<\/li>\n<\/ul>\n

      DIP User response<\/h4>\n

      The DIP User is expected to reply within the specified timeframe, either by:<\/p>\n

        \n
      • requesting further clarification, or<\/li>\n
      • acknowledging the issue and providing an estimated date for implementing a fix<\/li>\n<\/ul>\n

        Follow\u2011up<\/h4>\n

        If the DIP User does not respond within the stated timeframe, the DIP Manager will send a follow\u2011up email.<\/p>\n

         <\/p>\n

        If you use a third\u2011party service provider<\/h4>\n

        If a company uses a DIP Connection Provider (DCP) or another third\u2011party service, the DIP Manager will engage only with the company, not the service provider. The company is responsible for:<\/p>\n

          \n
        • managing its commercial relationship with any service providers it uses<\/li>\n
        • ensuring that those service providers support the DIP User in meeting their obligations<\/li>\n<\/ul>\n<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\n<\/article> ","s3_url":""},"yoast_head":"\nHow we investigate and handle breaches - DIP<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How we investigate and handle breaches\" \/>\n<meta property=\"og:description\" content=\"This page explains how we identify potential breaches, who we contact, and how we communicate and follow up with DIP Users.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/\" \/>\n<meta property=\"og:site_name\" content=\"DIP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/\",\"url\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/\",\"name\":\"How we investigate and handle breaches - DIP\",\"isPartOf\":{\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website\"},\"datePublished\":\"2026-01-26T13:34:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Assurance\",\"item\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How we investigate and handle breaches\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website\",\"url\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/\",\"name\":\"DIP\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How we investigate and handle breaches - DIP","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"How we investigate and handle breaches","og_description":"This page explains how we identify potential breaches, who we contact, and how we communicate and follow up with DIP Users.","og_url":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/","og_site_name":"DIP","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/","url":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/","name":"How we investigate and handle breaches - DIP","isPartOf":{"@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website"},"datePublished":"2026-01-26T13:34:26+00:00","breadcrumb":{"@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/how-we-investigate-and-handle-breaches\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/"},{"@type":"ListItem","position":2,"name":"Assurance","item":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/assurance\/"},{"@type":"ListItem","position":3,"name":"How we investigate and handle breaches"}]},{"@type":"WebSite","@id":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/#website","url":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/","name":"DIP","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/users\/353"}],"replies":[{"embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/comments?post=627"}],"version-history":[{"count":1,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/627\/revisions"}],"predecessor-version":[{"id":628,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/627\/revisions\/628"}],"up":[{"embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/pages\/605"}],"wp:attachment":[{"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/media?parent=627"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elexon-beta.elexonhostings.co.uk\/data-integration-platform\/wp-json\/wp\/v2\/tags?post=627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}