OpenLegislation

Paragraph 9 Protection against attack

Original text. Later amendments are not shown.

A relevant charge point must be configured so that—

(a)

if there is an attempt (whether or not successful) to breach the tamper-protection boundary, it notifies the owner;

(b)

its software runs with only the minimum level of access privileges required for it to deliver its functionality;

(c)

any logical or network interfaces that are not required for the normal operation of the relevant charge point, or otherwise to comply with the requirements in these Regulations, are disabled;

(d)

software services are not available to the owner unless necessary for the relevant charge point to operate;

(e)

any hardware interfaces that are used for the purposes of testing or development, but not otherwise during the operation of the relevant charge point, are not exposed.