# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 34: For all interconnections of CIS with another IT system the following basic requirements shall be met:

Extent: E+W+S+N.I.

(a) business or operational requirements for such interconnections shall be stated and approved by the competent authorities;
(b) the interconnection shall undergo a risk management and accreditation process and shall require the approval of the competent SAAs; and
(c) Boundary Protection Services (BPS) shall be implemented at the perimeter of all CIS.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/10/division/34 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-34
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.