Division 3 Physical security measures shall be selected on the basis of a threat assessment made by the competent authorities. The GSC and Member States shall each apply a risk management process for protecting EUCI on their premises to ensure that a commensurate level of physical protection is afforded against the assessed risk. The risk management process shall take account of all relevant factors, in particular:
United Kingdom
- (a)
the classification level of EUCI;
- (b)
the form and volume of EUCI, bearing in mind that large quantities or a compilation of EUCI may require more stringent protective measures to be applied;
- (c)
the surrounding environment and structure of the buildings or areas housing EUCI; and
- (d)
the assessed threat from intelligence services which target the Union or Member States and from sabotage, terrorist, subversive or other criminal activities.