Paragraph 2

are of sufficient standard to allow the scheme to meet its objectives as set out in the business plan;

are capable of being upgraded to reflect changes in required transactions and capacity;

have restricted physical and electronic access, with firewalls and other appropriate protection against viruses and other threats;

have a back-up system which allows data to be recovered if the main system fails.