personnel to service and support its Gateway and associated functions, which person(s) are available to provide: physical support, on an on-site basis, during Business Hours; and remote on-call support outside Business Connections and disconnections Connection eligibility To be and remain eligible for connection to the Superannuation Transaction Network for the purposes of operating a Gateway, a Gateway Operator must: undertake and successfully complete the entry process in accordance with the Superannuation Transaction Network process and requirements for New Gateway Operators; have its connection request endorsed by written notification: from a Superannuation Entity to the ATO resulting in the Gateway Operator being recorded in the ATO Fund Register as the Gateway Operator for the Superannuation Entity; or from an employer or their service provider to the GOG Secretariat nominating the Gateway Operator as their Gateway Operator; commit to certify each other, as participants in the Superannuation Transaction Network by undertaking and successfully passing interoperability testing between all parties to the regulations as outlined in the testing framework and criteria set out in Appendix A. Disconnecting GSPs Before a Gateway Operator may permit or implement any disconnection of its connectivity or systems from the Superannuation Transaction Network, that Gateway Operator must: submit at least four (4) weeks prior written notice of that disconnection to each employer or Superannuation Entity for which it performs Gateway Services; reasonably co-operate with each such employer or Superannuation Entity in relation to the co-ordination of any such proposed disconnection and the transition of the performance of Gateway-related functions and services (including Gateway-related data and messaging services) and/or connected or associated functions to any Gateway Operator nominated by that employer or Superannuation Entity; be otherwise entitled to permit or implement that disconnection, including under the terms of any contract or agreement with each employer or Superannuation Entity for which it performs Gateway Services; cooperate with the transfer of historical data records if required by the Gateway Operator’s client(s) as allowed under clause 6.7(f)(ii); and procure that it is ceases to be the subject of an active listing as a Gateway Service Provider in the Fund Validation Service spreadsheet held by the ATO.
The Test Types are: Test type Description Test Areas to be covered (but not limited to) Testing Scenarios Success measure Gateway Operator Internal testing Testing to be conducted within each organisation in line with individual project development lifecycles Message receipt and processing Message generation Validation of message data including header and payloads where applicable Send to self in test environment Open and process messages Message technical structure complies with EbMS 3.0/AS4.0 standards Message business content complies with SuperStream MIGs Connectivity testing Testing: the ability to connect to other gateway operators in test environments and the production connection; and ATO connection for Fund Validation Services Mutual authentication Digital certificate authentication Open connection Close connection Confirm authenticated party Detect unauthenticated party Connection to authorised gateways confirmed Connection to unauthorised gateways rejected Successfully shut down connection as defence Ability to send/receive messages/file testing Testing to ensure that, even though a connection can be achieved, the connection allows a file/message to be sent/received Files/messages received acknowledged and processed Files/messages sent Files/messages received and acknowledged by all funds on the Gateway Operator’s network Transport level encryption in tact Send to other party, Receive from other party Routing positive and negative scenarios including valid/invalid addressing Reconciliation with counterparties accounts for all Message integrity intact Error/Response Messages Ensure ability to generate appropriate technical receipt or messages Technical error messages sent/received Ability to resolve non receipts/errors Deliberate error scenarios Deliberate non receipt generation from/to counterparties Generation of accurate error codes, Validation of successful business resolution processes Format/content testing Testing, using test data, to ensure the recipient can pick up the file/message and “read” it or onsend it ebms Header testing Message testing will be across all message types. Include compressed payload and associated processes Positive and negative scenarios including valid/invalid senders/receivers, dates, ABN/TFN, message types and error codes Counterparty gateways can “read” and route messages to/from new gateway Integrity testing Testing to ensure that new connections have not corrupted any other parts of the Superannuation Transaction Network. Network participants connect and subsequently disconnect All participants connect and mutually authenticate – end to end network connections Uninterrupted network availability as a result of new connection