# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 46

Extent: E+W+S+N.I.

The Crypto Approval Authority (CAA) shall be responsible for ensuring that cryptographic products comply with national cryptographic policy or the Council’s cryptographic policy. It shall grant the approval of a cryptographic product to protect EUCI to a defined level of classification in its operational environment. As regards the Member States, the CAA shall in addition be responsible for evaluating cryptographic products.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/IV/division/III/division/4/division/46 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-IV/division-III/division-4/division-46
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.