{
  "url": "https://openlegislation.uk/eu-decision-2019-425/schedule-ANNEX II/division-4./division-4.3./division-4.3.4.",
  "json_url": "https://openlegislation.uk/eu-decision-2019-425/schedule-ANNEX II/division-4./division-4.3./division-4.3.4..json",
  "legislation": "eudn/2019/425",
  "legislation_title": "Council Decision (EU) 2019/425 of 12 March 2019 on the position to be taken on behalf of the European Union within the Joint Committee established by the Agreement between the European Union and the Kingdom of Norway on administrative cooperation, combating fraud and recovery of claims in the field of value added tax",
  "legislation_url": "https://openlegislation.uk/eu-decision-2019-425",
  "path": "schedule/ANNEX II/division/4./division/4.3./division/4.3.4.",
  "kind": "division",
  "number": "4.3.4",
  "heading": "Security Management",
  "text": "This service concerns the management of the security items, required by CCN/CSI environment, by the Service Provider.\nSecurity is managed as well on the level of the involved server equipment (OS), network equipment and on operational level.\nInformation exchanges over the CCN/CSI network are protected to ensure optimal confidentiality and data integrity.\nSecurity services include:\nsite-to-site encryption and protection against unwanted accesses enforced by firewall/encryption devices;\naccess control mechanisms (authentication, authorisation, accounting) at site level enforced at CCN Gateway and supported by local administration tools (ADM3G);\nsession-level security enforced by message-level encryption (CSI secure), SSL mutual authentication and encryption (HTTPS & NJCSI), POP-S and IMAP-S (secure e-mail transport);\nSIAP unified defence mechanism for secured internet access to CCN services.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2019/425/schedule/ANNEX II/division/4./division/4.3./division/4.3.4.",
    "retrieved_at": "2026-11-01T15:12:47.334120+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}