# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 21: Awareness of the risks and available security measures is the first line of defence for the security of CIS. In particular all personnel involved in the life-cycle of CIS, including users, shall understand:

Extent: E+W+S+N.I.

(a) that security failures may significantly harm the CIS;
(b) the potential harm to others which may arise from interconnectivity and interdependency; and
(c) their individual responsibility and accountability for the security of CIS according to their roles within the systems and processes.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/7/division/21 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-7/division-21
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.