{
  "url": "https://openlegislation.uk/eu-decision-2018-559/article-6",
  "json_url": "https://openlegislation.uk/eu-decision-2018-559/article-6.json",
  "legislation": "eudn/2018/559",
  "legislation_title": "Commission Decision (EU, Euratom) 2018/559 of 6 April 2018 laying down implementing rules for Article 6 of Decision (EU, Euratom) 2017/46 on the security of communication and information systems in the European Commission",
  "legislation_url": "https://openlegislation.uk/eu-decision-2018-559",
  "path": "article/6",
  "kind": "article",
  "number": "6",
  "heading": "IT security inspections",
  "text": "1. The Directorate-General for Human Resources and Security shall undertake IT security inspections in order to verify whether IT security measures comply with the Commission's IT security policies and to check the integrity of these control measures.\n2. The Directorate-General for Human Resources and Security may perform an IT security inspection:\n(a) on its own initiative;\n(b) on request from the Information Security Steering Board (ISSB);\n(c) on a request received from a system owner;\n(d) further to a security incident; or\n(e) further to the identification of a high risk to a particular system.\n3. Data owners may request an IT security inspection before storing their information in a CIS.\n4. The results of an inspection shall be documented in a formal report to the system owner, and copied to the LISO, that includes findings and recommendations for improving the CIS's compliance with the IT security policy. The Directorate-General for Human Resources and Security shall report significant issues and recommendations to the ISSB.\n5. The Directorate-General for Human Resources and Security shall monitor the implementation of the recommendations.\n6. Where appropriate, IT security inspections shall include the inspection of services, premises and equipment provided to the system owner, including both internal and external service providers.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2018/559/article/6",
    "retrieved_at": "2026-11-01T15:13:08.707342+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}