Division 44 The IAA shall be responsible for:

developing IA security policies and security guidelines and monitoring their effectiveness and pertinence;

safeguarding and administering technical information related to cryptographic products;

ensuring that IA measures selected for protecting EUCI comply with the relevant policies governing their eligibility and selection;

ensuring that cryptographic products are selected in compliance with policies governing their eligibility and selection;

coordinating training and awareness on IA;

consulting with the system provider, the security actors and representatives of users in respect to IA security policies and security guidelines; and

ensuring appropriate expertise is available in the expert sub-area of the Security Committee for IA issues.