# Commission Decision of 4 May 2010 on the Security Plan for the operation of the Visa Information System (2010/260/EU), Article 3: Local Security Officer for the central VIS

Extent: E+W+S+N.I.

1. Without prejudice to Article 8, the Commission shall designate a Local Security Officer for the central VIS from among its officials. Conflicts of interest between the duty of Local Security Officer and any other official duty shall be prevented. The Local Security Officer for the central VIS shall be appointed by the Director-General of the Directorate-General for Justice, Freedom and Security of the Commission.
2. The Local Security Officer for the central VIS shall ensure that the security measures referred to in this Decision are implemented and the security procedures are followed in the principal central VIS. As regards the backup central VIS, the Local Security Officer for the central VIS shall ensure that security measures referred to in this Decision, except those referred to at Article 10, are implemented and the security procedures relating thereto are followed.
3. The Local Security Officer for central VIS may assign any of his or her tasks to subordinate personnel. Conflicts of interest between the duty to execute these tasks and any other official duty shall be prevented. A single contact phone number and address shall allow reaching the Local Security Officer or his or her on-duty subordinate at any time.
4. The Local Security Officer for the central VIS shall perform the tasks resulting from security measures to be taken at the principal and backup central VIS sites, within the limits of paragraph 1, including in particular:
(a) local operational security tasks including firewall audit, regular security testing, auditing and reporting;
(b) monitoring the effectiveness of the business continuity plan and ensuring that regular exercises are conducted;
(c) securing evidence on, and reporting to the System Security Officer, any incident that may have an impact on the security of the central VIS or the communication infrastructure;
(d) informing the System Security Officer if the Security Policy needs to be amended;
(e) monitoring that this Decision and the Security Policy are applied by any contractor including subcontractors being involved in any way in the management and operation of the central VIS;
(f) ensuring that the staff are made aware of their obligations and monitoring the application of the Security Policy;
(g) monitoring IT security developments and ensuring that staff is trained accordingly;
(h) preparing underlying information and options for the establishment, update and review of the Security Policy in accordance with Article 7.

---
Source: https://www.legislation.gov.uk/eudn/2010/260/article/3 (the official version)
Page: https://openlegislation.uk/eu-decision-2010-260/article-3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.