Paragraph 10

To comply with the other obligations imposed by a technical capability notice in such a manner that the risk of any unauthorised persons becoming aware of any matter within section 132(4) of the Act is minimised, in particular by ensuring that apparatus, systems or other facilities or services, as well as procedures and policies, are developed and maintained in accordance with security standards or guidance specified in the notice.

For the purpose of this paragraph, a person is an unauthorised person in relation to a matter within section 132(4) of the Act if, were the matter disclosed to that person by a person to whom section 132 applies, that disclosure would be an unauthorised disclose.