# Council Decision of 23 September 2013 on the security rules for protecting EU classified information (2013/488/EU), Division 36

Extent: E+W+S+N.I.

Where a contract involves handling information classified RESTREINT UE/EU RESTRICTED in a CIS operated by a contractor, the GSC as contracting authority shall ensure that the contract or any subcontract specifies the necessary technical and administrative requirements regarding accreditation of the CIS commensurate with the assessed risk, taking account of all relevant factors. The scope of accreditation of such CIS shall be agreed between the contracting authority and the relevant NSA/DSA.

---
Source: https://www.legislation.gov.uk/eudn/2013/488/annex/V/division/VIII/division/36 (the official version)
Page: https://openlegislation.uk/eu-decision-2013-488/annex-V/division-VIII/division-36
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.