# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 7

Extent: E+W+S+N.I.

The specific requirements, scale and the degree of detail determined by the relevant SAA for accrediting a CIS shall be commensurate with the assessed risk, taking account of all relevant factors, including the classification level of the EUCI handled in the CIS. Accreditation shall include a formal residual risk statement and acceptance of the residual risk by a responsible authority.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/2/division/7 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-2/division-7
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.