OpenLegislation

Annex

United Kingdom

Original text. Later amendments are not shown.

The Annex to Regulation (EC) No 1663/95 is amended as follows:

  1. 1..

    Point 2(iii) is replaced by the following:

    1. (iii)

      ‘Accounting for payment: the objective of this function is the recording of the payment in the agency’s separate books of account of EAGGF expenditure, which will normally be in the form of an information system, and the preparation of periodic summaries of expenditure, including the monthly and annual declarations to the Commission. The books of account also record the assets financed by the Fund, in particular concerning intervention stocks, uncleared advances and debtors.’

  2. 2..

    In the introductory phrase of point 4, the terms ‘and/or the technical service’ are replaced by the terms ‘, technical service, and/or information systems management’.

  3. 3..

    Point 6(vi) is replaced by the following:

    1. (vi)

      ‘Information systems security shall be based on the criteria laid down in a version applicable in the financial year concerned of one of the following internationally accepted standards:

      • International Standards Organisation 17799/British Standard 7799: Code of practice for Information Security Management (BS ISO/IEC 17799),

      • Bundesamt für Sicherheit in der Informationstechnik: IT-Grundschutzhandbuch/IT Baseline Protection Manual (BSI),

      • Information Systems Audit and Control Foundation: Control Objectives for Information and related Technology (COBIT).

      The paying agency shall choose one of the international standards referred to in the first subparagraph as the basis for its information systems security.

      Security measures should be adapted to the administrative structure, staffing and technological environment of each individual paying agency. The financial and technological effort should be in proportion to the actual risks presented.’