# Commission Decision of 4 May 2010 on the Security Plan for Central SIS II and the Communication Infrastructure (2010/261/EU), Article 5: Security incidents

Extent: E+W+S+N.I.

1. Any event that has or may have an impact on the security of SIS II and may cause damage or loss to SIS II shall be considered as a security incident, especially where access to data may have occurred or where the availability, integrity and confidentiality of data has or may have been compromised.
2. Security incidents shall be managed to ensure a quick, effective and proper response in compliance with the Security Policy. Procedures shall be established to recover from an incident.
3. Information regarding a security incident that has or may have an impact on the operation of SIS II in a Member State or on the availability, integrity and confidentiality of the data entered or sent by a Member State, shall be provided to the Member State concerned. Security incidents shall be notified to the Data Protection Officer of the Commission.

---
Source: https://www.legislation.gov.uk/eudn/2010/261/article/5 (the official version)
Page: https://openlegislation.uk/eu-decision-2010-261/article-5
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.