# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 26

Extent: E+W+S+N.I.

Prior to being recommended for approval by the Council or the Secretary-General in accordance with Article 10(6), such cryptographic products shall have undergone a successful second party evaluation by an Appropriately Qualified Authority (AQUA) of a Member State not involved in the design or manufacture of the equipment. The degree of detail required in a second party evaluation shall depend on the envisaged maximum classification level of EUCI to be protected by these products. The Council shall approve a security policy on the evaluation and approval of cryptographic products.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/II/division/8/division/26 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-II/division-8/division-26
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.