# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 35: There shall be no interconnection between an accredited CIS and an unprotected or public network, except where the CIS has approved BPS installed for such a purpose between the CIS and the unprotected or public network. The security measures for such interconnections shall be reviewed by the competent IAA and approved by the competent SAA.

Extent: E+W+S+N.I.

When the unprotected or public network is used solely as a carrier and the data is encrypted by a cryptographic product approved in accordance with Article 10, such a connection shall not be deemed to be an interconnection.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/10/division/35 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-10/division-35
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.