# Commission Decision (EU, Euratom) 2018/559 of 6 April 2018 laying down implementing rules for Article 6 of Decision (EU, Euratom) 2017/46 on the security of communication and information systems in the European Commission, Annex: ROLES AND RESPONSIBILITIES (RASCI)

Extent: E+W+S+N.I.

The RASCI model assigns roles to entities using the following abbreviations:
(a) R Responsible;
(b) A Accountable;
(c) S Supporting;
(d) C Consulted;
(e) I Informed.
The ISSB is consulted in relation to the operation of internal networks by any Commission department other than the Directorate-General for Informatics.
The system owner of a CIS being outsourced shall be responsible, and the system owner of any other CIS with which an outsourced CIS interconnects shall be consulted.
RoleProcess
ISSB
HR (DS)
Commission Departments
System Owner
Data Owner
LISO
DIGIT
Contractors
Alignment with the Commission's information security policy
R/A
S
S
Encrypting technologies
C
A
R
I
C
IT Security Inspections
I
A/R
S
I
I
S
Access from external networks
C
C
A
R
I
S
S
Outsourcing of CISs
S/C
A
R/C
S
C
S

---
Source: https://www.legislation.gov.uk/eudn/2018/559/annex (the official version)
Page: https://openlegislation.uk/eu-decision-2018-559/annex
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.