Article 3 Local Security Officer for Central SIS II
United Kingdom
Without prejudice to Article 8, the Commission shall designate a Local Security Officer for Central SIS II from among its officials. Conflicts of interest between the duty of Local Security Officer and any other official duty shall be prevented. The Local Security Officer for Central SIS II shall be appointed by the Director General of the Directorate-General for Justice, Freedom and Security of the Commission.
The Local Security Officer for Central SIS II shall ensure that the security measures referred to in this Decision are implemented and the security procedures are followed in the principal CS-SIS. As regards the backup CS-SIS, the Local Security Officer for Central SIS II shall further ensure that security measures referred to in this Decision, except those referred to in Article 9, are implemented and the security procedures relating thereto are followed.
The Local Security Officer for Central SIS II may assign any of his or her tasks to subordinate personnel. Conflicts of interest between the duty to execute these tasks and any other official duty shall be prevented. A single contact phone number and address shall allow reaching the Local Security Officer or his or her on-duty subordinate at any time.
The Local Security Officer for Central SIS II shall perform the tasks resulting from security measures to be taken at the premises where the principal CS-SIS and the backup CS-SIS are located, within the limits of paragraph 1, including in particular:
local operational security tasks including firewall audit, regular security testing, auditing and reporting;
monitoring the effectiveness of the business continuity plan and ensuring that regular exercises are conducted;
securing evidence on, and reporting to the System Security Officer, any incident in Central SIS II that may have an impact on the security of the Central SIS II or the Communication Infrastructure;
informing the System Security Officer if the Security Policy needs to be amended;
monitoring that this Decision and the Security Policy are applied by any contractor including subcontractors being involved in any way in the operational management of Central SIS II;
ensuring that the staff is made aware of their obligations and monitoring the application of the Security Policy;
monitoring IT security developments and ensuring that staff is trained accordingly;
preparing underlying information and options for the establishment, update and review of the Security Policy in accordance with Article 7.