{"id":577,"date":"2026-05-14T13:37:41","date_gmt":"2026-05-14T13:37:41","guid":{"rendered":"https:\/\/elexon-beta.elexonhostings.co.uk\/sses\/?page_id=577"},"modified":"2026-05-21T07:44:59","modified_gmt":"2026-05-21T07:44:59","slug":"sses-security-governance-group","status":"publish","type":"page","link":"https:\/\/elexon-beta.elexonhostings.co.uk\/sses\/about-sses-committees-groups\/commitee-group\/sses-security-governance-group\/","title":{"rendered":"SSES Security Governance Group"},"content":{"rendered":"

The new\u202fSmart Secure Electricity Systems (SSES)\u202fSecurity Governance Group (SGG), which will operate from Autumn 2026,\u202fwill bring together experts from across the\u202fenergy\u202fsector to protect consumers and their data, maintain trust and safeguard the system by managing cyber and system security risks.<\/span>\u00a0<\/span><\/p>\n

As defined in the SSES Governance Framework document, the\u00a0SGG will\u202fadvise\u00a0the Government and regulators on the cyber security and system security arrangements needed to safely support Consumer-Led Flexibility (CLF).<\/span>\u00a0<\/span><\/p>\n

The\u00a0SGG will\u00a0operate\u00a0as a subcommittee of the Balancing and Settlement Code (BSC) Panel, with Elexon providing governance and secretariat support.<\/span>\u00a0<\/span><\/p>\n

Elected SGG members should be prepared to undergo an appropriate level of security clearance. This clearance is subject to change depending on how the functions and activities of the SGG evolves.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

The new\u202fSmart Secure Electricity Systems (SSES)\u202fSecurity Governance Group (SGG), which will operate from Autumn 2026,\u202fwill bring together experts from across the\u202fenergy\u202fsector to protect consumers and their data, maintain trust and […]<\/p>\n","protected":false},"author":351,"featured_media":0,"parent":391,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","inline_featured_image":false,"footnotes":""},"tags":[],"class_list":["post-577","page","type-page","status-publish","hentry"],"acf":[],"semantic_search":{"post_id":577,"title":"SSES Security Governance Group","link":"https:\/\/elexon-beta.elexonhostings.co.uk\/sses\/about-sses-committees-groups\/commitee-group\/sses-security-governance-group\/","categories":[],"tags":[],"content":"

\n\n\t\t\n\t\t
\n\t\t\t
\n\t\t\t\t
\t\t\n\t\t\t\t\t

The new\u202fSmart Secure Electricity Systems (SSES)\u202fSecurity Governance Group (SGG), which will operate from Autumn 2026,\u202fwill bring together experts from across the\u202fenergy\u202fsector to protect consumers and their data, maintain trust and safeguard the system by managing cyber and system security risks.<\/span>\u00a0<\/span><\/p>\n

As defined in the SSES Governance Framework document, the\u00a0SGG will\u202fadvise\u00a0the Government and regulators on the cyber security and system security arrangements needed to safely support Consumer-Led Flexibility (CLF).<\/span>\u00a0<\/span><\/p>\n

The\u00a0SGG will\u00a0operate\u00a0as a subcommittee of the Balancing and Settlement Code (BSC) Panel, with Elexon providing governance and secretariat support.<\/span>\u00a0<\/span><\/p>\n

Elected SGG members should be prepared to undergo an appropriate level of security clearance. This clearance is subject to change depending on how the functions and activities of the SGG evolves.<\/span><\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/section>\n\t\n\t\t

\n\t\t
\n\t\t\t\t\t\t\n\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
Remit<\/div>\n
\n
\n\t
\t\t \t\n\t

The detailed\u00a0Terms of Reference\u00a0for the\u00a0SGG, covering its functions,\u202fduties,\u202fobjectives, membership and decision-making arrangements,\u202fis\u202fset out in the\u202fSSES\u00a0Governance Framework Document.\u202f<\/span>\u00a0<\/span><\/p>\n

The group will oversee and\u202fmaintain\u202fthe security frameworks and guidance that apply to\u202fLoad\u202fControllers and other SSES Participants, and will provide recommendations to the Government and regulators where changes are needed.\u202f<\/span>\u00a0<\/span><\/p>\n

The\u202fSecurity Governance Group\u202fwill\u202fconsider matters\u202fsuch as:\u202f<\/span>\u00a0<\/span><\/p>\n

    \n
  • cyber security requirements and good practice for\u202fload\u202fcontrol\u202f<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
      \n
    • security risk and threat assessments\u202f<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
        \n
      • assurance approaches that provide confidence in compliance\u202f<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
          \n
        • how security requirements evolve as technology and markets develop\u202f<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
            \n
          • how security incidents or emerging risks should be escalated\u202f.<\/span><\/li>\n<\/ul>\n

            Some discussions may involve sensitive or confidential information. Where this is the case, the group will\u202foperate\u202fappropriate confidentiality\u202farrangements\u00a0while\u202fmaintaining\u202ftransparency wherever possible.\u202f<\/span>\u00a0<\/span><\/p>\n

            The group\u00a0will help\u00a0make sure that the security arrangements underpinning smart energy systems\u00a0are robust,\u00a0by:\u202f<\/span>\u00a0<\/span><\/p>\n

              \n
            • developing\u202fand maintaining\u202fSSES Security\u202fdocuments\u202fand guidance documents,\u202fwhich\u202fmay include\u202fCLF security architecture,\u202fsecurity\u00a0requirements\u00a0and organisational and device-level\u202frequirements\u202f<\/span>\u00a0<\/span><\/li>\n
            • assessing\u00a0whether the\u202fSSES Security Framework\u202fremains\u202fproportionate, risk-based and aligned with\u202fpolicy set by the Government and regulatory requirements. As well as\u202fperiodically\u202freview the\u00a0SSES Security Framework\u00a0against the\u00a0SSES Objectives\u202f<\/span>\u00a0<\/span><\/li>\n
            • monitoring\u202fthe CLF ecosystem and landscape and updating security requirements, or proposing updates to DESNZ\/Ofgem-owned documentation where appropriate<\/span><\/li>\n
            • supporting Ofgem with assessing the cyber security evidence provided as part of load control licence applications, as well as ad hoc cyber security advice and support to the sector, DESNZ and Ofgem<\/li>\n
            • supporting Ofgem with the monitoring, compliance and assurance regime for organisations in scope of the load control licence<\/li>\n
            • monitoring grid stability developments and producing any supplementary guidance to support licencees<\/li>\n
            • preparing <\/span><\/span><\/span>a confidential\u00a0<\/span><\/span><\/span>annual State of the sub-Sector report for CLF, to feed into Ofgem’s wider STate of the Sector report<\/span><\/span><\/span><\/li>\n
            • establishing and overseeing <\/span>s<\/span>ub<\/span>–<\/span>group<\/span>s to explore specific issues in more deta<\/span>il or to support wider engagement with\u00a0<\/span>expert stakeholders.<\/span><\/span>\u00a0<\/span><\/li>\n<\/ul>\n\t <\/div>\n <\/div>\n <\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t
              \n\t\t\t\t\t\t
              Membership<\/div>\n
              \n
              \n\t
              \t\t \t\n\t

              The\u202fgroup\u202fwill bring together\u202ftechnical\u202fexpertise\u202ffrom across the sector, including representatives from:\u202f\u202f<\/span>\u00a0<\/span><\/p>\n\n\n\n\n\n\n\n\n\n
              Six LCs \/ Flexibility Service Providers (FSPs)<\/span>\u00a0<\/span><\/td>\nElected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
              Three ESA Providers<\/span>\u00a0<\/span><\/td>\nElected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
              Two Distribution Companies<\/span>\u00a0<\/span><\/td>\nElected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
              One consumer member<\/span>\u00a0<\/span><\/td>\nNon-elected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
              NESO<\/span>\u00a0<\/span><\/td>\nNon-elected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
              DESNZ<\/span>\u00a0<\/span><\/td>\nNon-elected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
              Ofgem<\/span>\u00a0<\/span><\/td>\nNon-elected<\/span>\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

              \u00a0<\/span><\/b>\u00a0<\/span><\/p>\n

              The group will be led\u00a0by an independent Chair, to ensure discussions are well-run, balanced and\u202fevidence based.\u202fInitially, the group will be chaired by a\u00a0Government-appointed chair to support continuity from the\u00a0existing\u00a0working group to the\u00a0SGG.\u202f<\/span>\u00a0<\/span><\/p>\n

              Elexon does not make security policy\u202fdecisions but\u202fenables the\u00a0group to\u202foperate\u202feffectively within the agreed\u00a0Governance\u00a0Framework,\u00a0supporting\u00a0the Government and Ofgem on security considerations\u202fregarding\u202fESAs and\u00a0LCs.\u00a0\u202f<\/span>\u00a0<\/span><\/p>\n\t <\/div>\n <\/div>\n <\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<\/section>\n\t

              \n\t\t
              \n\t\t\t\t\t\t\t

              SGG nominations timeline and process
              <\/div><\/h2>\n\t\t\t \n\t\t\t
              \t\t\n\t\t\t\t

              Nominations will open for SSES SGG election candidates on 1 June 2026 and will remain<\/span>\u00a0open until 17:00 on\u00a019 July 2026. Nominations\u00a0submitted\u00a0after this date will not be accepted.<\/span><\/p>\n\n\n\n\n\n
              Nomination window open<\/td>\n1 June – 26 June 2026<\/td>\n<\/tr>\n
              Nominees complete candidate nomination forms<\/td>\n29 June – 10 July 2026<\/td>\n<\/tr>\n
              Nominated SGG election candidate list published<\/td>\n27 July 2026<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

              Who can be nominated as a SGG candidate<\/h3>\n

              We are seeking\u202fnominations for the\u202ffollowing\u202ftypes\u202fof SGG\u202fmember:\u202f<\/span>\u00a0<\/span><\/p>\n\n\n\n\n\n\n
              Number of positions<\/strong><\/td>\nType of member<\/strong><\/td>\nDefinition<\/strong><\/td>\n<\/tr>\n
              Six<\/td>\nLoad Controller \/ Flexibility Service Provider<\/td>\nA person whose main skills and experience are in relation to load control activities \/ A person whose main skills and experience are in relation to flexibility service provider activities.<\/td>\n<\/tr>\n
              Three<\/td>\nEnergy Smart Appliance (ESA) Provider<\/td>\nA person that is subject to obligations in respect of ESAs under energy smart regulations (as defined in section 238(7) of the Energy Act 2023).<\/td>\n<\/tr>\n
              Two<\/td>\nDistribution Company<\/td>\nA network, or network operator, authorised to be operated by the holder of an electricity distribution licence.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

              How the nomination process works<\/h3>\n

              SGG members will be appointed via election and must first be nominated as a candidate. Anyone can nominate a candidate, and there is no limit to the number of nominations you can\u00a0submit. Self-nominations are also allowed.<\/span>\u00a0<\/span><\/p>\n

              After receiving your nomination, we will contact the candidate to confirm\u00a0they:<\/span>\u00a0<\/span><\/p>\n

                \n
              • are willing to be put forward for election as an SGG member<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
                  \n
                • understand and acknowledge the duties and responsibilities of being an SGG member, including that their appointment is subject to the satisfactory completion of paperwork relating to their impartiality, independence from their employer and confidentiality<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
                    \n
                  • possess the skills and experience necessary to become an SGG member<\/span>\u00a0<\/span><\/li>\n<\/ul>\n
                      \n
                    • reasonably expect to have sufficient capacity to fulfil the role for the forthcoming two-year period (we estimate the role may require input of 25 days per year)<\/span>\u00a0<\/span><\/li>\n<\/ul>\n

                      We will also request nominated candidates\u00a0provide\u00a0information to aid the election process, including a short biography and CV.<\/span>\u00a0<\/span><\/p>\n

                      If a candidate is elected as a SGG member, they will need to confirm in writing that they will act impartially and independently,\u202fproviding advice and feedback in a manner intended to meet the SSES objectives, not their employer or core stakeholder group. The candidate will also need to confirm in writing they will comply with the confidentiality and disclosure requirements established under the SSES Governance Framework Document. <\/span> Elected SGG members should be prepared to undergo an appropriate level of security clearance (currently BPSS or equivalent). This clearance level is subject to change depending on how the functions and activities of the SGG evolves.<\/span><\/p>\n

                      Members will not be remunerated for their time. However, Elexon will cover expenses and indemnify SGG members against any costs or liabilities incurred whilst acting in their capacity as SGG member.<\/span>\u00a0<\/span><\/p>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t

                      \n\t\t
                      \n\t\t\t\t\t\t\n\t\t\t
                      \n\t\t\t\t\t\t\t\t\t
                      \n\t\t\t\t\t\t
                      Required skills and experience<\/div>\n
                      \n
                      \n\t
                      \t\t \t\n\t

                      Candidates\u202fmust be\u202fexperienced cyber security professionals\u202fwith\u202fthe capacity,\u202fexpertise\u202fand skills\u202fneeded\u202fto\u202ffulfil the duties and functions of the SGG.\u202f Members\u202fwill\u202fassist\u202fwith:\u202f<\/span>\u00a0<\/span><\/p>\n

                        \n
                      • Monitoring the CLF ecosystem and landscape and updating security requirements, or proposing updates to DESNZ or Ofgem\u202fowned\u202fdocumentation\u202fwhere appropriate<\/li>\n
                      • Maintaining Threat and Risk Assessments and Systems-Theoretic Process Analysis\u202fSystems-Theoretic Process Analysis documents<\/li>\n
                      • Maintaining Trust Modelling and CLF Security Architecture documents<\/li>\n
                      • Supporting development of Cyber Assessment Framework and proposing\u00a0changes to DESNZ or Ofgem where appropriate<\/li>\n
                      • Developing\u00a0accompanying guidance alongside organisational and device requirements<\/li>\n
                      • Supporting Ofgem with assessing the cyber security evidence provided as part of load control licence applications<\/li>\n
                      • Supporting Ofgem with the monitoring and compliance regime for organisations in scope of the load control licence<\/li>\n
                      • Producing\u00a0an annual State of the sub-Sector report for CLF, to feed into Ofgem\u2019s wider State of the Sector report<\/li>\n
                      • Monitoring\u00a0grid stability developments and producing\u00a0any supplementary guidance to support licensees<\/li>\n
                      • Providing ad hoc cyber security advice and support\u202fto the sector, DESNZ and regulators where appropriate.<\/li>\n<\/ul>\n

                        Desirable skills and experience include:<\/p>\n

                          \n
                        • technical expertise<\/strong> \u2013 strong understanding of ESAs, security standards, cyber security measures, interoperability and governance frameworks; understanding of how flexibility markets and distributed energy resources impact network security and operational resilience; experience in risk, threat and architecture assessments; and deep experience of the sector for which the nomination relates (Load Control, Flexibility Service Provider (within the load control category), ESA Provider, Distribution Company).<\/li>\n
                        • stakeholder engagement skills<\/strong>\u00a0\u2013 good communicator with proven ability to collaborate in multi stakeholder environments and work towards consensus<\/li>\n
                        • governance and analytical skills<\/strong> \u2013 ability to exercise sound judgement and evidence-led reasoning when assessing potential changes to security frameworks.<\/li>\n<\/ul>\n\t <\/div>\n <\/div>\n <\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<\/section>\n\t
                          \n\t\t
                          \n\t\t\t \n\t\t\t
                          \t\t\n\t\t\t\t