# Council Decision of 31 March 1992 in the field of security of information systems (92/242/EEC), Division 6.4: Requirements, options and priorities

Extent: E+W+S+N.I.

Because of the number of different actors concerned and the close relations to regulatory and legislative questions, it is particularly important to pre-agree on the principles which should govern the provision of the security of information systems.
In developing a consistent approach to this question, one will need to address the aspects of identification and specification of functions requiring, by their very nature, the availability of some independent organizations (or inter-working organizations). This could include functions such as the administration of a public/private key system.
In addition, it is required to identify and specify, at an early stage, the functions which in the public interest need to be entrusted to independent organizations (or interworking organizations). This could, for example, include auditing, quality assurance, verification, certification and similar functions.

---
Source: https://www.legislation.gov.uk/eudn/1992/242/annex/division/1/division/6/division/6.4 (the official version)
Page: https://openlegislation.uk/eu-decision-1992-242/annex/division-1/division-6/division-6.4
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.