{
  "url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-5/division-16",
  "json_url": "https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-5/division-16.json",
  "legislation": "eudn/2013/488",
  "legislation_title": "Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2013-488",
  "path": "annex/IV/division/II/division/5/division/16",
  "kind": "division",
  "number": "16",
  "heading": "To mitigate risk to CIS, a range of technical and non-technical security measures, organised as multiple layers of defence, shall be implemented. These layers shall include:",
  "text": "(a) Deterrence security measures aimed at dissuading any adversary planning to attack the CIS;\n(b) Prevention security measures aimed at impeding or blocking an attack on the CIS;\n(c) Detection security measures aimed at discovering the occurrence of an attack on the CIS;\n(d) Resilience security measures aimed at limiting impact of an attack to a minimum set of information or CIS assets and preventing further damage; and\n(e) Recovery security measures aimed at regaining a secure situation for the CIS.\nThe degree of stringency of such security measures shall be determined following a risk assessment.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/5/division/16",
    "retrieved_at": "2026-11-01T15:15:00.335921+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}