{
  "url": "https://openlegislation.uk/eu-decision-1992-242/annex/division-1/division-2/division-2.4",
  "json_url": "https://openlegislation.uk/eu-decision-1992-242/annex/division-1/division-2/division-2.4.json",
  "legislation": "eudn/1992/242",
  "legislation_title": "Council Decision of 31 March 1992 in the field of security of information systems (92/242/EEC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-1992-242",
  "path": "annex/division/1/division/2/division/2.4",
  "kind": "division",
  "number": "2.4",
  "heading": "Requirements, options and priorities",
  "text": "As a basis for a consistent and transparent treatment of the justified needs of the sector actors, it is considered necessary to develop an agreed classification of user requirements and its relation to the provision of security in information systems.\nIt is also considered important to identify requirements for legislation, regulations and codes of practice in the light of an assessment of trends in service characteristics and technology, to identify alternative strategies for meeting the objectives by administrative, service, operational and technical provisions, and to assess the effectiveness, user-friendliness and costs of alternative security options and strategies for information systems for users, service providers and operators.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/1992/242/annex/division/1/division/2/division/2.4",
    "retrieved_at": "2026-11-01T15:19:49.498173+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}