# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 9: When issuing an FSC, the relevant NSA or DSA shall, as a minimum:

Extent: E+W+S+N.I.

(a) evaluate the integrity of the industrial or other entity;
(b) evaluate ownership, control, or the potential for undue influence that may be considered a security risk;
(c) verify that the industrial or any other entity has established a security system at the facility which covers all appropriate security measures necessary for the protection of information or material classified CONFIDENTIEL UE/EU CONFIDENTIAL or SECRET UE/EU SECRET in accordance with the requirements laid down in this Decision;
(d) verify that the personnel security status of management, owners and employees who are required to have access to information classified CONFIDENTIEL UE/EU CONFIDENTIAL or SECRET UE/EU SECRET has been established in accordance with the requirements laid down in this Decision; and
(e) verify that the industrial or any other entity has appointed a Facility Security Officer who is responsible to its management for enforcing the security obligations within such an entity.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/V/division/III/division/9 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-V/division-III/division-9
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.