{ "url": "https://openlegislation.uk/eu-decision-2013-488", "json_url": "https://openlegislation.uk/eu-decision-2013-488.json", "id": "eudn/2013/488", "title": "Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU)", "short_title": "Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU)", "long_title": "Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU)", "citation": "EU Decision 2013/488", "type": "eudn", "year": "2013", "number": "488", "version": "current", "date": "2013-09-23", "revised": false, "valid_from": null, "extent": "E+W+S+N.I.", "unapplied_effects": 0, "provisions": [ { "path": "introduction", "kind": "introduction", "number": null, "heading": "Introductory text", "url": "https://openlegislation.uk/eu-decision-2013-488/introduction", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/1", "kind": "article", "number": "1", "heading": "Purpose, scope and definitions", "url": "https://openlegislation.uk/eu-decision-2013-488/article-1", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/2", "kind": "article", "number": "2", "heading": "Definition of EUCI, security classifications and markings", "url": "https://openlegislation.uk/eu-decision-2013-488/article-2", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/3", "kind": "article", "number": "3", "heading": "Classification management", "url": "https://openlegislation.uk/eu-decision-2013-488/article-3", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/4", "kind": "article", "number": "4", "heading": "Protection of classified information", "url": "https://openlegislation.uk/eu-decision-2013-488/article-4", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/5", "kind": "article", "number": "5", "heading": "Security risk management", "url": "https://openlegislation.uk/eu-decision-2013-488/article-5", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/6", "kind": "article", "number": "6", "heading": "Implementation of this Decision", "url": "https://openlegislation.uk/eu-decision-2013-488/article-6", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/7", "kind": "article", "number": "7", "heading": "Personnel security", "url": "https://openlegislation.uk/eu-decision-2013-488/article-7", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/8", "kind": "article", "number": "8", "heading": "Physical security", "url": "https://openlegislation.uk/eu-decision-2013-488/article-8", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/9", "kind": "article", "number": "9", "heading": "Management of classified information", "url": "https://openlegislation.uk/eu-decision-2013-488/article-9", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/10", "kind": "article", "number": "10", "heading": "Protection of EUCI handled in communication and information systems", "url": "https://openlegislation.uk/eu-decision-2013-488/article-10", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/11", "kind": "article", "number": "11", "heading": "Industrial security", "url": "https://openlegislation.uk/eu-decision-2013-488/article-11", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/12", "kind": "article", "number": "12", "heading": "Sharing EUCI", "url": "https://openlegislation.uk/eu-decision-2013-488/article-12", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/13", "kind": "article", "number": "13", "heading": "Exchange of classified information with third States and international organisations", "url": "https://openlegislation.uk/eu-decision-2013-488/article-13", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/14", "kind": "article", "number": "14", "heading": "Breaches of security and compromise of EUCI", "url": "https://openlegislation.uk/eu-decision-2013-488/article-14", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/15", "kind": "article", "number": "15", "heading": "Responsibility for implementation", "url": "https://openlegislation.uk/eu-decision-2013-488/article-15", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/16", "kind": "article", "number": "16", "heading": "The organisation of security in the Council", "url": "https://openlegislation.uk/eu-decision-2013-488/article-16", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/17", "kind": "article", "number": "17", "heading": "Security Committee", "url": "https://openlegislation.uk/eu-decision-2013-488/article-17", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/18", "kind": "article", "number": "18", "heading": "Replacement of previous decision", "url": "https://openlegislation.uk/eu-decision-2013-488/article-18", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "article/19", "kind": "article", "number": "19", "heading": "Entry into force", "url": "https://openlegislation.uk/eu-decision-2013-488/article-19", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/I", "kind": "annex", "number": "I", "heading": "PERSONNEL SECURITY", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/I/division/I", "kind": "division", "number": "I", "heading": "INTRODUCTION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/I/division/1", "kind": "division", "number": "1", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-I/division-1", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/I" }, { "path": "annex/I/division/II", "kind": "division", "number": "II", "heading": "GRANTING ACCESS TO EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/II/division/2", "kind": "division", "number": "2", "heading": "An individual shall only be granted access to classified information after:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-II/division-2", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/II" }, { "path": "annex/I/division/II/division/3", "kind": "division", "number": "3", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-II/division-3", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/II" }, { "path": "annex/I/division/III", "kind": "division", "number": "III", "heading": "PERSONNEL SECURITY CLEARANCE REQUIREMENTS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/III/division/4", "kind": "division", "number": "4", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-4", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III" }, { "path": "annex/I/division/III/division/5", "kind": "division", "number": "5", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-5", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III" }, { "path": "annex/I/division/III/division/6", "kind": "division", "number": "6", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-6", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III" }, { "path": "annex/I/division/III/division/n4", "kind": "division", "number": null, "heading": "Security investigation criteria", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III" }, { "path": "annex/I/division/III/division/n4/division/7", "kind": "division", "number": "7", "heading": "The loyalty, trustworthiness and reliability of an individual for the purposes of being security cleared for access to information classified CONFIDENTIEL UE/EU CONFIDENTIAL or above shall be determined by means of a security investigation. The competent national authority shall make an overall assessment based on the findings of such a security investigation. The principal criteria used for that purpose include, to the extent possible under national laws and regulations, an examination of whether the individual:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n4/division-7", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n4" }, { "path": "annex/I/division/III/division/n4/division/8", "kind": "division", "number": "8", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n4/division-8", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n4" }, { "path": "annex/I/division/III/division/n4/division/9", "kind": "division", "number": "9", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n4/division-9", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n4" }, { "path": "annex/I/division/III/division/n5", "kind": "division", "number": null, "heading": "Investigative requirements for access to EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III" }, { "path": "annex/I/division/III/division/n5/division/1", "kind": "division", "number": null, "heading": "Initial granting of a security clearance", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5" }, { "path": "annex/I/division/III/division/n5/division/1/division/10", "kind": "division", "number": "10", "heading": "The initial security clearance for access to information classified CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET shall be based on a security investigation covering at least the last 5 years, or from age 18 to the present, whichever is the shorter, which shall include the following:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-1/division-10", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/1" }, { "path": "annex/I/division/III/division/n5/division/1/division/11", "kind": "division", "number": "11", "heading": "The initial security clearance for access to information classified TRÈS SECRET UE/EU TOP SECRET shall be based on a security investigation covering at least the last 10 years, or from age 18 to the present, whichever is the shorter. If interviews are conducted as stated in point (e), investigations shall cover at least the last 7 years, or from age 18 to the present, whichever is the shorter. In addition to the criteria indicated in paragraph 7 above, the following elements shall be investigated, to the extent possible under national laws and regulations, before granting a TRÈS SECRET UE/EU TOP SECRET PSC; they may also be investigated before granting a CONFIDENTIEL UE/EU CONFIDENTIAL or SECRET UE/EU SECRET PSC, where required by national laws and regulations:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-1/division-11", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/1" }, { "path": "annex/I/division/III/division/n5/division/1/division/12", "kind": "division", "number": "12", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-1/division-12", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/1" }, { "path": "annex/I/division/III/division/n5/division/2", "kind": "division", "number": null, "heading": "Renewal of a security clearance", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5" }, { "path": "annex/I/division/III/division/n5/division/2/division/13", "kind": "division", "number": "13", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-2/division-13", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/2" }, { "path": "annex/I/division/III/division/n5/division/2/division/14", "kind": "division", "number": "14", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-2/division-14", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/2" }, { "path": "annex/I/division/III/division/n5/division/2/division/15", "kind": "division", "number": "15", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-2/division-15", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/2" }, { "path": "annex/I/division/III/division/n5/division/3", "kind": "division", "number": null, "heading": "Authorisation procedures in the GSC", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5" }, { "path": "annex/I/division/III/division/n5/division/3/division/16", "kind": "division", "number": "16", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-16", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/17", "kind": "division", "number": "17", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-17", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/18", "kind": "division", "number": "18", "heading": "Following completion of the security investigation, the relevant NSA shall notify the GSC Security Authority of the outcome of such an investigation, using the standard format for the correspondence prescribed by the Security Committee.", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-18", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/19", "kind": "division", "number": "19", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-19", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/20", "kind": "division", "number": "20", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-20", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/21", "kind": "division", "number": "21", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-21", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/22", "kind": "division", "number": "22", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-22", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/23", "kind": "division", "number": "23", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-23", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/24", "kind": "division", "number": "24", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-24", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/3/division/25", "kind": "division", "number": "25", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-3/division-25", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/3" }, { "path": "annex/I/division/III/division/n5/division/4", "kind": "division", "number": null, "heading": "Records of security clearances and authorisations", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5" }, { "path": "annex/I/division/III/division/n5/division/4/division/26", "kind": "division", "number": "26", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-4/division-26", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/4" }, { "path": "annex/I/division/III/division/n5/division/4/division/27", "kind": "division", "number": "27", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n5/division-4/division-27", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n5/division/4" }, { "path": "annex/I/division/III/division/n6", "kind": "division", "number": null, "heading": "Exemptions from the PSC requirement", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III" }, { "path": "annex/I/division/III/division/n6/division/28", "kind": "division", "number": "28", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-III/division-n6/division-28", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/III/division/n6" }, { "path": "annex/I/division/IV", "kind": "division", "number": "IV", "heading": "SECURITY EDUCATION AND AWARENESS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/IV/division/29", "kind": "division", "number": "29", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-IV/division-29", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/IV" }, { "path": "annex/I/division/IV/division/30", "kind": "division", "number": "30", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-IV/division-30", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/IV" }, { "path": "annex/I/division/IV/division/31", "kind": "division", "number": "31", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-IV/division-31", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/IV" }, { "path": "annex/I/division/V", "kind": "division", "number": "V", "heading": "EXCEPTIONAL CIRCUMSTANCES", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/V/division/32", "kind": "division", "number": "32", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-32", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/33", "kind": "division", "number": "33", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-33", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/34", "kind": "division", "number": "34", "heading": "When an individual is to be assigned to a position that requires a security clearance at one level higher than that currently possessed by the individual, the assignment may be made on a provisional basis, provided that:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-34", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/35", "kind": "division", "number": "35", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-35", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/36", "kind": "division", "number": "36", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-36", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/37", "kind": "division", "number": "37", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-37", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/38", "kind": "division", "number": "38", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-38", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/39", "kind": "division", "number": "39", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-39", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/V/division/40", "kind": "division", "number": "40", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-V/division-40", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/V" }, { "path": "annex/I/division/VI", "kind": "division", "number": "VI", "heading": "ATTENDANCE AT MEETINGS IN THE COUNCIL", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/VI/division/41", "kind": "division", "number": "41", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-VI/division-41", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/VI" }, { "path": "annex/I/division/VI/division/42", "kind": "division", "number": "42", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-VI/division-42", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/VI" }, { "path": "annex/I/division/VII", "kind": "division", "number": "VII", "heading": "POTENTIAL ACCESS TO EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I" }, { "path": "annex/I/division/VII/division/43", "kind": "division", "number": "43", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-I/division-VII/division-43", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/I/division/VII" }, { "path": "annex/II", "kind": "annex", "number": "II", "heading": "PHYSICAL SECURITY", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/II/division/I", "kind": "division", "number": "I", "heading": "INTRODUCTION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II" }, { "path": "annex/II/division/I/division/1", "kind": "division", "number": "1", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-I/division-1", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/I" }, { "path": "annex/II/division/I/division/2", "kind": "division", "number": "2", "heading": "Physical security measures shall be designed to prevent unauthorised access to EUCI by:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-I/division-2", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/I" }, { "path": "annex/II/division/II", "kind": "division", "number": "II", "heading": "PHYSICAL SECURITY REQUIREMENTS AND MEASURES", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II" }, { "path": "annex/II/division/II/division/3", "kind": "division", "number": "3", "heading": "Physical security measures shall be selected on the basis of a threat assessment made by the competent authorities. The GSC and Member States shall each apply a risk management process for protecting EUCI on their premises to ensure that a commensurate level of physical protection is afforded against the assessed risk. The risk management process shall take account of all relevant factors, in particular:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-II/division-3", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/II" }, { "path": "annex/II/division/II/division/4", "kind": "division", "number": "4", "heading": "The competent security authority, applying the concept of defence in depth, shall determine the appropriate combination of physical security measures to be implemented. These can include one or more of the following:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-II/division-4", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/II" }, { "path": "annex/II/division/II/division/5", "kind": "division", "number": "5", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-II/division-5", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/II" }, { "path": "annex/II/division/II/division/6", "kind": "division", "number": "6", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-II/division-6", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/II" }, { "path": "annex/II/division/II/division/7", "kind": "division", "number": "7", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-II/division-7", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/II" }, { "path": "annex/II/division/III", "kind": "division", "number": "III", "heading": "EQUIPMENT FOR THE PHYSICAL PROTECTION OF EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II" }, { "path": "annex/II/division/III/division/8", "kind": "division", "number": "8", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-III/division-8", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/III" }, { "path": "annex/II/division/III/division/9", "kind": "division", "number": "9", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-III/division-9", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/III" }, { "path": "annex/II/division/III/division/10", "kind": "division", "number": "10", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-III/division-10", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/III" }, { "path": "annex/II/division/III/division/11", "kind": "division", "number": "11", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-III/division-11", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/III" }, { "path": "annex/II/division/IV", "kind": "division", "number": "IV", "heading": "PHYSICALLY PROTECTED AREAS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II" }, { "path": "annex/II/division/IV/division/12", "kind": "division", "number": "12", "heading": "Two types of physically protected areas, or the national equivalents thereof, shall be established for the physical protection of EUCI:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-12", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/13", "kind": "division", "number": "13", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-13", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/14", "kind": "division", "number": "14", "heading": "For Administrative Areas:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-14", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/15", "kind": "division", "number": "15", "heading": "For Secured Areas:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-15", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/16", "kind": "division", "number": "16", "heading": "Where entry into a Secured Area constitutes, for all practical purposes, direct access to the classified information contained in it, the following additional requirements shall apply:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-16", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/17", "kind": "division", "number": "17", "heading": "Secured Areas protected against eavesdropping shall be designated technically Secured Areas. The following additional requirements shall apply:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-17", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/18", "kind": "division", "number": "18", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-18", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/19", "kind": "division", "number": "19", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-19", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/20", "kind": "division", "number": "20", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-20", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/21", "kind": "division", "number": "21", "heading": "Security operating procedures shall be drawn up for each Secured Area stipulating:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-21", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/IV/division/22", "kind": "division", "number": "22", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-IV/division-22", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/IV" }, { "path": "annex/II/division/V", "kind": "division", "number": "V", "heading": "PHYSICAL PROTECTIVE MEASURES FOR HANDLING AND STORING EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II" }, { "path": "annex/II/division/V/division/23", "kind": "division", "number": "23", "heading": "EUCI which is classified RESTREINT UE/EU RESTRICTED may be handled:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-23", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/V/division/24", "kind": "division", "number": "24", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-24", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/V/division/25", "kind": "division", "number": "25", "heading": "EUCI which is classified CONFIDENTIEL UE/EU CONFIDENTIAL or SECRET UE/EU SECRET may be handled:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-25", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/V/division/26", "kind": "division", "number": "26", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-26", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/V/division/27", "kind": "division", "number": "27", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-27", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/V/division/28", "kind": "division", "number": "28", "heading": "EUCI which is classified TRÈS SECRET UE/EU TOP SECRET shall be stored in a Secured Area under one of the following conditions:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-28", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/V/division/29", "kind": "division", "number": "29", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-V/division-29", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/V" }, { "path": "annex/II/division/VI", "kind": "division", "number": "VI", "heading": "CONTROL OF KEYS AND COMBINATIONS USED FOR PROTECTING EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II" }, { "path": "annex/II/division/VI/division/30", "kind": "division", "number": "30", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-VI/division-30", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/VI" }, { "path": "annex/II/division/VI/division/31", "kind": "division", "number": "31", "heading": "Combination settings shall be committed to memory by the smallest possible number of individuals needing to know them. Combination settings for security containers and strong rooms storing EUCI shall be changed:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-II/division-VI/division-31", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/II/division/VI" }, { "path": "annex/III", "kind": "annex", "number": "III", "heading": "MANAGEMENT OF CLASSIFIED INFORMATION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/III/division/I", "kind": "division", "number": "I", "heading": "INTRODUCTION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/I/division/1", "kind": "division", "number": "1", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-I/division-1", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/I" }, { "path": "annex/III/division/II", "kind": "division", "number": "II", "heading": "CLASSIFICATION MANAGEMENT", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/II/division/1", "kind": "division", "number": null, "heading": "Classifications and markings", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II" }, { "path": "annex/III/division/II/division/1/division/2", "kind": "division", "number": "2", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-2", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/3", "kind": "division", "number": "3", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-3", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/4", "kind": "division", "number": "4", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-4", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/5", "kind": "division", "number": "5", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-5", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/6", "kind": "division", "number": "6", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-6", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/7", "kind": "division", "number": "7", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-7", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/8", "kind": "division", "number": "8", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-8", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/1/division/9", "kind": "division", "number": "9", "heading": "The classification of a letter or note covering enclosures shall be as high as the highest classification of its enclosures. The originator shall indicate clearly at which level it is classified when detached from its enclosures by means of an appropriate marking, e.g.:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-1/division-9", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/1" }, { "path": "annex/III/division/II/division/2", "kind": "division", "number": null, "heading": "Markings", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II" }, { "path": "annex/III/division/II/division/2/division/10", "kind": "division", "number": "10", "heading": "In addition to one of the security classification markings set out in Article 2(2), EUCI may bear additional markings, such as:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-2/division-10", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/2" }, { "path": "annex/III/division/II/division/3", "kind": "division", "number": null, "heading": "Abbreviated classification markings", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II" }, { "path": "annex/III/division/II/division/3/division/11", "kind": "division", "number": "11", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-3/division-11", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/3" }, { "path": "annex/III/division/II/division/3/division/12", "kind": "division", "number": "12", "heading": "The following standard abbreviations may be used within EU classified documents to indicate the classification level of sections or blocks of text of less than a single page:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-3/division-12", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/3" }, { "path": "annex/III/division/II/division/4", "kind": "division", "number": null, "heading": "Creation of EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II" }, { "path": "annex/III/division/II/division/4/division/13", "kind": "division", "number": "13", "heading": "When creating an EU classified document:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-4/division-13", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/4" }, { "path": "annex/III/division/II/division/4/division/14", "kind": "division", "number": "14", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-4/division-14", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/4" }, { "path": "annex/III/division/II/division/5", "kind": "division", "number": null, "heading": "Downgrading and declassification of EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II" }, { "path": "annex/III/division/II/division/5/division/15", "kind": "division", "number": "15", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-5/division-15", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/5" }, { "path": "annex/III/division/II/division/5/division/16", "kind": "division", "number": "16", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-II/division-5/division-16", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/II/division/5" }, { "path": "annex/III/division/III", "kind": "division", "number": "III", "heading": "REGISTRATION OF EUCI FOR SECURITY PURPOSES", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/III/division/17", "kind": "division", "number": "17", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-17", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/18", "kind": "division", "number": "18", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-18", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/19", "kind": "division", "number": "19", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-19", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/20", "kind": "division", "number": "20", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-20", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/21", "kind": "division", "number": "21", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-21", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/22", "kind": "division", "number": "22", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-22", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/7", "kind": "division", "number": null, "heading": "TRÈS SECRET UE/EU TOP SECRET registries", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III" }, { "path": "annex/III/division/III/division/7/division/23", "kind": "division", "number": "23", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-7/division-23", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III/division/7" }, { "path": "annex/III/division/III/division/7/division/24", "kind": "division", "number": "24", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-III/division-7/division-24", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/III/division/7" }, { "path": "annex/III/division/IV", "kind": "division", "number": "IV", "heading": "COPYING AND TRANSLATING EU CLASSIFIED DOCUMENTS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/IV/division/25", "kind": "division", "number": "25", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-IV/division-25", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/IV" }, { "path": "annex/III/division/IV/division/26", "kind": "division", "number": "26", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-IV/division-26", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/IV" }, { "path": "annex/III/division/IV/division/27", "kind": "division", "number": "27", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-IV/division-27", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/IV" }, { "path": "annex/III/division/V", "kind": "division", "number": "V", "heading": "CARRIAGE OF EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/V/division/28", "kind": "division", "number": "28", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-28", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V" }, { "path": "annex/III/division/V/division/29", "kind": "division", "number": "29", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-29", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V" }, { "path": "annex/III/division/V/division/3", "kind": "division", "number": null, "heading": "Within a building or self-contained group of buildings", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V" }, { "path": "annex/III/division/V/division/3/division/30", "kind": "division", "number": "30", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-3/division-30", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/3" }, { "path": "annex/III/division/V/division/3/division/31", "kind": "division", "number": "31", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-3/division-31", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/3" }, { "path": "annex/III/division/V/division/4", "kind": "division", "number": null, "heading": "Within the Union", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V" }, { "path": "annex/III/division/V/division/4/division/32", "kind": "division", "number": "32", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-4/division-32", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/4" }, { "path": "annex/III/division/V/division/4/division/33", "kind": "division", "number": "33", "heading": "The carriage of information classified CONFIDENTIEL UE/EU CONFIDENTIAL or SECRET UE/EU SECRET within the Union shall be by one of the following means:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-4/division-33", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/4" }, { "path": "annex/III/division/V/division/4/division/34", "kind": "division", "number": "34", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-4/division-34", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/4" }, { "path": "annex/III/division/V/division/4/division/35", "kind": "division", "number": "35", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-4/division-35", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/4" }, { "path": "annex/III/division/V/division/4/division/36", "kind": "division", "number": "36", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-4/division-36", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/4" }, { "path": "annex/III/division/V/division/5", "kind": "division", "number": null, "heading": "From within the Union to the territory of a third State", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V" }, { "path": "annex/III/division/V/division/5/division/37", "kind": "division", "number": "37", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-5/division-37", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/5" }, { "path": "annex/III/division/V/division/5/division/38", "kind": "division", "number": "38", "heading": "The carriage of information classified CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET from within the Union to the territory of a third State shall be by one of the following means:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-5/division-38", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/5" }, { "path": "annex/III/division/V/division/5/division/39", "kind": "division", "number": "39", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-5/division-39", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/5" }, { "path": "annex/III/division/V/division/5/division/40", "kind": "division", "number": "40", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-5/division-40", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/5" }, { "path": "annex/III/division/V/division/5/division/41", "kind": "division", "number": "41", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-V/division-5/division-41", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/V/division/5" }, { "path": "annex/III/division/VI", "kind": "division", "number": "VI", "heading": "DESTRUCTION OF EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/VI/division/42", "kind": "division", "number": "42", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-42", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VI/division/43", "kind": "division", "number": "43", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-43", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VI/division/44", "kind": "division", "number": "44", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-44", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VI/division/45", "kind": "division", "number": "45", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-45", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VI/division/46", "kind": "division", "number": "46", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-46", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VI/division/47", "kind": "division", "number": "47", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-47", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VI/division/48", "kind": "division", "number": "48", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VI/division-48", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VI" }, { "path": "annex/III/division/VII", "kind": "division", "number": "VII", "heading": "ASSESSMENT VISITS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III" }, { "path": "annex/III/division/VII/division/49", "kind": "division", "number": "49", "heading": "The term ‘assessment visit’ shall be used hereinafter to designate any:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-49", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII" }, { "path": "annex/III/division/VII/division/50", "kind": "division", "number": "50", "heading": "Assessment visits shall be carried out, inter alia, to:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-50", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII" }, { "path": "annex/III/division/VII/division/51", "kind": "division", "number": "51", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-51", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII" }, { "path": "annex/III/division/VII/division/4", "kind": "division", "number": null, "heading": "Conduct of assessment visits", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII" }, { "path": "annex/III/division/VII/division/4/division/52", "kind": "division", "number": "52", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-4/division-52", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/4" }, { "path": "annex/III/division/VII/division/4/division/53", "kind": "division", "number": "53", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-4/division-53", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/4" }, { "path": "annex/III/division/VII/division/4/division/54", "kind": "division", "number": "54", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-4/division-54", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/4" }, { "path": "annex/III/division/VII/division/4/division/55", "kind": "division", "number": "55", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-4/division-55", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/4" }, { "path": "annex/III/division/VII/division/4/division/56", "kind": "division", "number": "56", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-4/division-56", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/4" }, { "path": "annex/III/division/VII/division/5", "kind": "division", "number": null, "heading": "Reports", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII" }, { "path": "annex/III/division/VII/division/5/division/57", "kind": "division", "number": "57", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-5/division-57", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/5" }, { "path": "annex/III/division/VII/division/5/division/58", "kind": "division", "number": "58", "heading": "For assessment visits conducted in Member States’ national administrations:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-5/division-58", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/5" }, { "path": "annex/III/division/VII/division/5/division/59", "kind": "division", "number": "59", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-5/division-59", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/5" }, { "path": "annex/III/division/VII/division/5/division/60", "kind": "division", "number": "60", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-5/division-60", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/5" }, { "path": "annex/III/division/VII/division/5/division/61", "kind": "division", "number": "61", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-5/division-61", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/5" }, { "path": "annex/III/division/VII/division/6", "kind": "division", "number": null, "heading": "Checklist", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII" }, { "path": "annex/III/division/VII/division/6/division/62", "kind": "division", "number": "62", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-6/division-62", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/6" }, { "path": "annex/III/division/VII/division/6/division/63", "kind": "division", "number": "63", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-III/division-VII/division-6/division-63", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/III/division/VII/division/6" }, { "path": "annex/IV", "kind": "annex", "number": "IV", "heading": "PROTECTION OF EUCI HANDLED IN CIS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/IV/division/I", "kind": "division", "number": "I", "heading": "INTRODUCTION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV" }, { "path": "annex/IV/division/I/division/1", "kind": "division", "number": "1", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-I/division-1", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/I" }, { "path": "annex/IV/division/I/division/2", "kind": "division", "number": "2", "heading": "The following IA properties and concepts are essential for the security and correct functioning of operations on CIS:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-I/division-2", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/I" }, { "path": "annex/IV/division/II", "kind": "division", "number": "II", "heading": "INFORMATION ASSURANCE PRINCIPLES", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV" }, { "path": "annex/IV/division/II/division/3", "kind": "division", "number": "3", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-3", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/2", "kind": "division", "number": null, "heading": "Security risk management", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/2/division/4", "kind": "division", "number": "4", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-2/division-4", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/2" }, { "path": "annex/IV/division/II/division/2/division/5", "kind": "division", "number": "5", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-2/division-5", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/2" }, { "path": "annex/IV/division/II/division/2/division/6", "kind": "division", "number": "6", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-2/division-6", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/2" }, { "path": "annex/IV/division/II/division/2/division/7", "kind": "division", "number": "7", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-2/division-7", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/2" }, { "path": "annex/IV/division/II/division/n3", "kind": "division", "number": null, "heading": "Security throughout the CIS life-cycle", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/n3/division/8", "kind": "division", "number": "8", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-n3/division-8", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/n3" }, { "path": "annex/IV/division/II/division/n3/division/9", "kind": "division", "number": "9", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-n3/division-9", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/n3" }, { "path": "annex/IV/division/II/division/n3/division/10", "kind": "division", "number": "10", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-n3/division-10", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/n3" }, { "path": "annex/IV/division/II/division/n3/division/11", "kind": "division", "number": "11", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-n3/division-11", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/n3" }, { "path": "annex/IV/division/II/division/n3/division/12", "kind": "division", "number": "12", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-n3/division-12", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/n3" }, { "path": "annex/IV/division/II/division/4", "kind": "division", "number": null, "heading": "Best practice", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/4/division/13", "kind": "division", "number": "13", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-4/division-13", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/4" }, { "path": "annex/IV/division/II/division/4/division/14", "kind": "division", "number": "14", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-4/division-14", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/4" }, { "path": "annex/IV/division/II/division/4/division/15", "kind": "division", "number": "15", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-4/division-15", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/4" }, { "path": "annex/IV/division/II/division/5", "kind": "division", "number": null, "heading": "Defence in depth", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/5/division/16", "kind": "division", "number": "16", "heading": "To mitigate risk to CIS, a range of technical and non-technical security measures, organised as multiple layers of defence, shall be implemented. These layers shall include:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-5/division-16", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/5" }, { "path": "annex/IV/division/II/division/5/division/17", "kind": "division", "number": "17", "heading": "The NSA or other competent authority shall ensure that:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-5/division-17", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/5" }, { "path": "annex/IV/division/II/division/6", "kind": "division", "number": null, "heading": "Principle of minimality and least privilege", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/6/division/18", "kind": "division", "number": "18", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-6/division-18", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/6" }, { "path": "annex/IV/division/II/division/6/division/19", "kind": "division", "number": "19", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-6/division-19", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/6" }, { "path": "annex/IV/division/II/division/6/division/20", "kind": "division", "number": "20", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-6/division-20", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/6" }, { "path": "annex/IV/division/II/division/7", "kind": "division", "number": null, "heading": "Information Assurance awareness", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/7/division/21", "kind": "division", "number": "21", "heading": "Awareness of the risks and available security measures is the first line of defence for the security of CIS. In particular all personnel involved in the life-cycle of CIS, including users, shall understand:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-7/division-21", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/7" }, { "path": "annex/IV/division/II/division/7/division/22", "kind": "division", "number": "22", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-7/division-22", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/7" }, { "path": "annex/IV/division/II/division/8", "kind": "division", "number": null, "heading": "Evaluation and approval of IT-security products", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/8/division/23", "kind": "division", "number": "23", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-23", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/24", "kind": "division", "number": "24", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-24", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/25", "kind": "division", "number": "25", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-25", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/26", "kind": "division", "number": "26", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-26", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/27", "kind": "division", "number": "27", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-27", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/28", "kind": "division", "number": "28", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-28", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/29", "kind": "division", "number": "29", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-29", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/8/division/30", "kind": "division", "number": "30", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-30", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/8" }, { "path": "annex/IV/division/II/division/9", "kind": "division", "number": null, "heading": "Transmission within Secured and Administrative Areas", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/9/division/31", "kind": "division", "number": "31", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-9/division-31", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/9" }, { "path": "annex/IV/division/II/division/10", "kind": "division", "number": null, "heading": "Secure interconnection of CIS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/10/division/32", "kind": "division", "number": "32", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-32", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/10" }, { "path": "annex/IV/division/II/division/10/division/33", "kind": "division", "number": "33", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-33", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/10" }, { "path": "annex/IV/division/II/division/10/division/34", "kind": "division", "number": "34", "heading": "For all interconnections of CIS with another IT system the following basic requirements shall be met:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-34", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/10" }, { "path": "annex/IV/division/II/division/10/division/35", "kind": "division", "number": "35", "heading": "There shall be no interconnection between an accredited CIS and an unprotected or public network, except where the CIS has approved BPS installed for such a purpose between the CIS and the unprotected or public network. The security measures for such interconnections shall be reviewed by the competent IAA and approved by the competent SAA.", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-35", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/10" }, { "path": "annex/IV/division/II/division/10/division/36", "kind": "division", "number": "36", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-36", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/10" }, { "path": "annex/IV/division/II/division/11", "kind": "division", "number": null, "heading": "Computer storage media", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/11/division/37", "kind": "division", "number": "37", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-11/division-37", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/11" }, { "path": "annex/IV/division/II/division/11/division/38", "kind": "division", "number": "38", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-11/division-38", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/11" }, { "path": "annex/IV/division/II/division/12", "kind": "division", "number": null, "heading": "Emergency circumstances", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II" }, { "path": "annex/IV/division/II/division/12/division/39", "kind": "division", "number": "39", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-12/division-39", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/12" }, { "path": "annex/IV/division/II/division/12/division/40", "kind": "division", "number": "40", "heading": "EUCI may be transmitted using cryptographic products which have been approved for a lower classification level or without encryption with the consent of the competent authority if any delay would cause harm clearly outweighing the harm entailed by any disclosure of the classified material and if:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-12/division-40", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/12" }, { "path": "annex/IV/division/II/division/12/division/41", "kind": "division", "number": "41", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-12/division-41", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/12" }, { "path": "annex/IV/division/II/division/12/division/42", "kind": "division", "number": "42", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-12/division-42", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/II/division/12" }, { "path": "annex/IV/division/III", "kind": "division", "number": "III", "heading": "INFORMATION ASSURANCE FUNCTIONS AND AUTHORITIES", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV" }, { "path": "annex/IV/division/III/division/43", "kind": "division", "number": "43", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-43", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/2", "kind": "division", "number": null, "heading": "Information Assurance Authority", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/2/division/44", "kind": "division", "number": "44", "heading": "The IAA shall be responsible for:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-2/division-44", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/2" }, { "path": "annex/IV/division/III/division/3", "kind": "division", "number": null, "heading": "TEMPEST Authority", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/3/division/45", "kind": "division", "number": "45", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-3/division-45", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/3" }, { "path": "annex/IV/division/III/division/4", "kind": "division", "number": null, "heading": "Crypto Approval Authority", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/4/division/46", "kind": "division", "number": "46", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-4/division-46", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/4" }, { "path": "annex/IV/division/III/division/5", "kind": "division", "number": null, "heading": "Crypto Distribution Authority", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/5/division/47", "kind": "division", "number": "47", "heading": "The Crypto Distribution Authority (CDA) shall be responsible for:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-5/division-47", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/5" }, { "path": "annex/IV/division/III/division/6", "kind": "division", "number": null, "heading": "Security Accreditation Authority", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/6/division/48", "kind": "division", "number": "48", "heading": "The SAA for each system shall be responsible for:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-6/division-48", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/6" }, { "path": "annex/IV/division/III/division/6/division/49", "kind": "division", "number": "49", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-6/division-49", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/6" }, { "path": "annex/IV/division/III/division/6/division/50", "kind": "division", "number": "50", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-6/division-50", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/6" }, { "path": "annex/IV/division/III/division/6/division/51", "kind": "division", "number": "51", "heading": "A joint Security Accreditation Board (SAB) shall be responsible for accrediting CIS within the remit of both the GSC SAA and Member States’ SAAs. It shall be composed of an SAA representative from each Member State and be attended by an SAA representative of the Commission. Other entities with nodes on a CIS shall be invited to attend when that system is under discussion.", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-6/division-51", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/6" }, { "path": "annex/IV/division/III/division/7", "kind": "division", "number": null, "heading": "Information Assurance Operational Authority", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III" }, { "path": "annex/IV/division/III/division/7/division/52", "kind": "division", "number": "52", "heading": "The IA Operational Authority for each system shall be responsible for:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-7/division-52", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/IV/division/III/division/7" }, { "path": "annex/V", "kind": "annex", "number": "V", "heading": "INDUSTRIAL SECURITY", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/V/division/I", "kind": "division", "number": "I", "heading": "INTRODUCTION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/I/division/1", "kind": "division", "number": "1", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-I/division-1", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/I" }, { "path": "annex/V/division/I/division/2", "kind": "division", "number": "2", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-I/division-2", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/I" }, { "path": "annex/V/division/II", "kind": "division", "number": "II", "heading": "SECURITY ELEMENTS IN A CLASSIFIED CONTRACT", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/II/division/1", "kind": "division", "number": null, "heading": "Security classification guide (SCG)", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II" }, { "path": "annex/V/division/II/division/1/division/3", "kind": "division", "number": "3", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-II/division-1/division-3", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II/division/1" }, { "path": "annex/V/division/II/division/1/division/4", "kind": "division", "number": "4", "heading": "In order to determine the security classification of the various elements of a classified contract, the following principles shall apply:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-II/division-1/division-4", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II/division/1" }, { "path": "annex/V/division/II/division/2", "kind": "division", "number": null, "heading": "Security aspects letter (SAL)", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II" }, { "path": "annex/V/division/II/division/2/division/5", "kind": "division", "number": "5", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-II/division-2/division-5", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II/division/2" }, { "path": "annex/V/division/II/division/2/division/6", "kind": "division", "number": "6", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-II/division-2/division-6", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II/division/2" }, { "path": "annex/V/division/II/division/3", "kind": "division", "number": null, "heading": "Programme/Project Security Instructions (PSI)", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II" }, { "path": "annex/V/division/II/division/3/division/7", "kind": "division", "number": "7", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-II/division-3/division-7", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/II/division/3" }, { "path": "annex/V/division/III", "kind": "division", "number": "III", "heading": "FACILITY SECURITY CLEARANCE (FSC)", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/III/division/8", "kind": "division", "number": "8", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-8", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/III" }, { "path": "annex/V/division/III/division/9", "kind": "division", "number": "9", "heading": "When issuing an FSC, the relevant NSA or DSA shall, as a minimum:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-9", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/III" }, { "path": "annex/V/division/III/division/10", "kind": "division", "number": "10", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-10", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/III" }, { "path": "annex/V/division/III/division/11", "kind": "division", "number": "11", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-11", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/III" }, { "path": "annex/V/division/III/division/12", "kind": "division", "number": "12", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-12", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/III" }, { "path": "annex/V/division/III/division/13", "kind": "division", "number": "13", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-13", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/III" }, { "path": "annex/V/division/IV", "kind": "division", "number": "IV", "heading": "CLASSIFIED CONTRACTS AND SUB-CONTRACTS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/IV/division/14", "kind": "division", "number": "14", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-14", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/15", "kind": "division", "number": "15", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-15", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/16", "kind": "division", "number": "16", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-16", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/17", "kind": "division", "number": "17", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-17", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/18", "kind": "division", "number": "18", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-18", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/19", "kind": "division", "number": "19", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-19", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/20", "kind": "division", "number": "20", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-20", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/21", "kind": "division", "number": "21", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-21", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/22", "kind": "division", "number": "22", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-22", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/IV/division/23", "kind": "division", "number": "23", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-IV/division-23", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/IV" }, { "path": "annex/V/division/V", "kind": "division", "number": "V", "heading": "VISITS IN CONNECTION WITH CLASSIFIED CONTRACTS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/V/division/24", "kind": "division", "number": "24", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-V/division-24", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/V" }, { "path": "annex/V/division/V/division/25", "kind": "division", "number": "25", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-V/division-25", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/V" }, { "path": "annex/V/division/V/division/26", "kind": "division", "number": "26", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-V/division-26", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/V" }, { "path": "annex/V/division/VI", "kind": "division", "number": "VI", "heading": "TRANSMISSION AND CARRIAGE OF EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/VI/division/27", "kind": "division", "number": "27", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VI/division-27", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VI" }, { "path": "annex/V/division/VI/division/28", "kind": "division", "number": "28", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VI/division-28", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VI" }, { "path": "annex/V/division/VI/division/29", "kind": "division", "number": "29", "heading": "For the transport of classified material as freight, the following principles shall be applied when determining security arrangements:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VI/division-29", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VI" }, { "path": "annex/V/division/VII", "kind": "division", "number": "VII", "heading": "TRANSFER OF EUCI TO CONTRACTORS LOCATED IN THIRD STATES", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/VII/division/30", "kind": "division", "number": "30", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VII/division-30", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VII" }, { "path": "annex/V/division/VIII", "kind": "division", "number": "VIII", "heading": "INFORMATION CLASSIFIED RESTREINT UE/EU RESTRICTED", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V" }, { "path": "annex/V/division/VIII/division/31", "kind": "division", "number": "31", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-31", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VIII" }, { "path": "annex/V/division/VIII/division/32", "kind": "division", "number": "32", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-32", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VIII" }, { "path": "annex/V/division/VIII/division/33", "kind": "division", "number": "33", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-33", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VIII" }, { "path": "annex/V/division/VIII/division/34", "kind": "division", "number": "34", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-34", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VIII" }, { "path": "annex/V/division/VIII/division/35", "kind": "division", "number": "35", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-35", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VIII" }, { "path": "annex/V/division/VIII/division/36", "kind": "division", "number": "36", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-36", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/V/division/VIII" }, { "path": "annex/VI", "kind": "annex", "number": "VI", "heading": "EXCHANGE OF CLASSIFIED INFORMATION WITH THIRD STATES AND INTERNATIONAL ORGANISATIONS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "annex/VI/division/I", "kind": "division", "number": "I", "heading": "INTRODUCTION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/I/division/1", "kind": "division", "number": "1", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-I/division-1", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/I" }, { "path": "annex/VI/division/II", "kind": "division", "number": "II", "heading": "FRAMEWORKS GOVERNING THE EXCHANGE OF CLASSIFIED INFORMATION", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/II/division/2", "kind": "division", "number": "2", "heading": "Where the Council determines that a long-term need exists to exchange classified information,", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-II/division-2", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/II" }, { "path": "annex/VI/division/II/division/3", "kind": "division", "number": "3", "heading": "Where EUCI generated for the purposes of a CSDP operation is to be provided to third States or international organisations participating in such an operation, and where neither of the frameworks referred to in paragraph 2 exists, the exchange of EUCI with the contributing third State or international organisation shall be regulated, in accordance with Section V, under:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-II/division-3", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/II" }, { "path": "annex/VI/division/II/division/4", "kind": "division", "number": "4", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-II/division-4", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/II" }, { "path": "annex/VI/division/III", "kind": "division", "number": "III", "heading": "SECURITY OF INFORMATION AGREEMENTS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/III/division/5", "kind": "division", "number": "5", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-5", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/6", "kind": "division", "number": "6", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-6", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/7", "kind": "division", "number": "7", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-7", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/8", "kind": "division", "number": "8", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-8", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/9", "kind": "division", "number": "9", "heading": "In order to assess the effectiveness of the security regulations, structures and procedures in the third State or international organisation concerned, assessment visits shall be conducted in mutual agreement with the third State or international organisation concerned. Such assessment visits shall be conducted in accordance with the relevant provisions of Annex III and shall evaluate:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-9", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/10", "kind": "division", "number": "10", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-10", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/11", "kind": "division", "number": "11", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-11", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/12", "kind": "division", "number": "12", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-12", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/13", "kind": "division", "number": "13", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-13", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/14", "kind": "division", "number": "14", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-14", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/15", "kind": "division", "number": "15", "heading": "Follow-up assessment visits shall be conducted as necessary, in particular if:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-15", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/III/division/16", "kind": "division", "number": "16", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-III/division-16", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/III" }, { "path": "annex/VI/division/IV", "kind": "division", "number": "IV", "heading": "ADMINISTRATIVE ARRANGEMENTS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/IV/division/17", "kind": "division", "number": "17", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-IV/division-17", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/IV" }, { "path": "annex/VI/division/IV/division/18", "kind": "division", "number": "18", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-IV/division-18", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/IV" }, { "path": "annex/VI/division/IV/division/19", "kind": "division", "number": "19", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-IV/division-19", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/IV" }, { "path": "annex/VI/division/IV/division/20", "kind": "division", "number": "20", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-IV/division-20", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/IV" }, { "path": "annex/VI/division/IV/division/21", "kind": "division", "number": "21", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-IV/division-21", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/IV" }, { "path": "annex/VI/division/V", "kind": "division", "number": "V", "heading": "EXCHANGE OF CLASSIFIED INFORMATION IN THE CONTEXT OF CSDP OPERATIONS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/V/division/22", "kind": "division", "number": "22", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-22", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/23", "kind": "division", "number": "23", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-23", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/24", "kind": "division", "number": "24", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-24", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/25", "kind": "division", "number": "25", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-25", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/26", "kind": "division", "number": "26", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-26", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/27", "kind": "division", "number": "27", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-27", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/28", "kind": "division", "number": "28", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-28", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/29", "kind": "division", "number": "29", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-29", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/30", "kind": "division", "number": "30", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-30", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/V/division/31", "kind": "division", "number": "31", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-V/division-31", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/V" }, { "path": "annex/VI/division/VI", "kind": "division", "number": "VI", "heading": "EXCEPTIONAL AD HOC RELEASE OF EUCI", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/VI/division/32", "kind": "division", "number": "32", "heading": "Where no framework is in place in accordance with Sections III to V, and where the Council or one of its preparatory bodies determines the exceptional need to release EUCI to a third State or international organisation, the GSC shall:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VI/division-32", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VI" }, { "path": "annex/VI/division/VI/division/33", "kind": "division", "number": "33", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VI/division-33", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VI" }, { "path": "annex/VI/division/VI/division/34", "kind": "division", "number": "34", "heading": "If the Security Committee’s recommendation is not in favour of releasing the EUCI:", "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VI/division-34", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VI" }, { "path": "annex/VI/division/VI/division/35", "kind": "division", "number": "35", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VI/division-35", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VI" }, { "path": "annex/VI/division/VI/division/36", "kind": "division", "number": "36", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VI/division-36", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VI" }, { "path": "annex/VI/division/VII", "kind": "division", "number": "VII", "heading": "AUTHORITY TO RELEASE EUCI TO THIRD STATES OR INTERNATIONAL ORGANISATIONS", "url": null, "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI" }, { "path": "annex/VI/division/VII/division/37", "kind": "division", "number": "37", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VII/division-37", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VII" }, { "path": "annex/VI/division/VII/division/38", "kind": "division", "number": "38", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VII/division-38", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VII" }, { "path": "annex/VI/division/VII/division/39", "kind": "division", "number": "39", "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/annex-VI/division-VII/division-39", "extent": "E+W+S+N.I.", "status": null, "parent": "annex/VI/division/VII" }, { "path": "attachment/1", "kind": "attachment", "number": null, "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/attachment-1", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "attachment/2", "kind": "attachment", "number": null, "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/attachment-2", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "attachment/2/division", "kind": "division", "number": null, "heading": "DEFINITIONS", "url": "https://openlegislation.uk/eu-decision-2013-488/attachment-2/division", "extent": null, "status": null, "parent": "attachment/2" }, { "path": "attachment/3", "kind": "attachment", "number": null, "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/attachment-3", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "attachment/4", "kind": "attachment", "number": null, "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/attachment-4", "extent": "E+W+S+N.I.", "status": null, "parent": null }, { "path": "attachment/5", "kind": "attachment", "number": null, "heading": null, "url": "https://openlegislation.uk/eu-decision-2013-488/attachment-5", "extent": "E+W+S+N.I.", "status": null, "parent": null } ], "outstanding_effects": [], "made_under": [], "changes_made_to": 0, "changes_made_to_url": "https://openlegislation.uk/eu-decision-2013-488/changes.json", "changes_made_by": 1, "changes_made_by_url": "https://openlegislation.uk/eu-decision-2013-488/changes/by-it.json", "instruments_made_under": 0, "instruments_made_under_url": "https://openlegislation.uk/eu-decision-2013-488/instruments.json", "provenance": { "source": "legislation.gov.uk", "source_url": "https://www.legislation.gov.uk/eudn/2013/488", "retrieved_at": "2026-11-01T15:15:00.335921+00:00" }, "licence": "Open Government Licence v3.0", "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/", "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives." }