# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 16: To mitigate risk to CIS, a range of technical and non-technical security measures, organised as multiple layers of defence, shall be implemented. These layers shall include:

Extent: E+W+S+N.I.

(a) Deterrence security measures aimed at dissuading any adversary planning to attack the CIS;
(b) Prevention security measures aimed at impeding or blocking an attack on the CIS;
(c) Detection security measures aimed at discovering the occurrence of an attack on the CIS;
(d) Resilience security measures aimed at limiting impact of an attack to a minimum set of information or CIS assets and preventing further damage; and
(e) Recovery security measures aimed at regaining a secure situation for the CIS.
The degree of stringency of such security measures shall be determined following a risk assessment.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/5/division/16 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-5/division-16
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.