# Council Decision (EU) 2019/425 of 12 March 2019 on the position to be taken on behalf of the European Union within the Joint Committee established by the Agreement between the European Union and the Kingdom of Norway on administrative cooperation, combating fraud and recovery of claims in the field of value added tax, Division 4.3.4: Security Management


This service concerns the management of the security items, required by CCN/CSI environment, by the Service Provider.
Security is managed as well on the level of the involved server equipment (OS), network equipment and on operational level.
Information exchanges over the CCN/CSI network are protected to ensure optimal confidentiality and data integrity.
Security services include:
site-to-site encryption and protection against unwanted accesses enforced by firewall/encryption devices;
access control mechanisms (authentication, authorisation, accounting) at site level enforced at CCN Gateway and supported by local administration tools (ADM3G);
session-level security enforced by message-level encryption (CSI secure), SSL mutual authentication and encryption (HTTPS & NJCSI), POP-S and IMAP-S (secure e-mail transport);
SIAP unified defence mechanism for secured internet access to CCN services.

---
Source: https://www.legislation.gov.uk/eudn/2019/425/schedule/ANNEX II/division/4./division/4.3./division/4.3.4. (the official version)
Page: https://openlegislation.uk/eu-decision-2019-425/schedule-ANNEX II/division-4./division-4.3./division-4.3.4.
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.