Annex ROLES AND RESPONSIBILITIES (RASCI)
United Kingdom
The RASCI model assigns roles to entities using the following abbreviations:
Responsible;
Accountable;
Supporting;
Consulted;
Informed.
| The ISSB is consulted in relation to the operation of internal networks by any Commission department other than the Directorate-General for Informatics. | ||||||||
| The system owner of a CIS being outsourced shall be responsible, and the system owner of any other CIS with which an outsourced CIS interconnects shall be consulted. | ||||||||
| RoleProcess | ISSB | HR (DS) | Commission Departments | System Owner | Data Owner | LISO | DIGIT | Contractors |
|---|---|---|---|---|---|---|---|---|
| Alignment with the Commission's information security policy | R/A | S | S | |||||
| Encrypting technologies | C | A | R | I | C | |||
| IT Security Inspections | I | A/R | S | I | I | S | ||
| Access from external networks | C f1 | C | A | R | I | S | S | |
| Outsourcing of CISs | S/C | A | R/C f2 | S | C | S | ||
Annotations
Footnotes
- f1
-
The ISSB is consulted in relation to the operation of internal networks by any Commission department other than the Directorate-General for Informatics.
- f2
-
The system owner of a CIS being outsourced shall be responsible, and the system owner of any other CIS with which an outsourced CIS interconnects shall be consulted.