Article 12 Role of Member States

Member States shall:

1. (a)

   transmit to the Security Accreditation Board all information they consider relevant for the purposes of security accreditation;

2. (b)

   F1permit duly authorised persons appointed by the Security Accreditation Board, in agreement with and under the supervision of national entities competent in security matters, to have access to any information and to any areas and/or sites related to the security of systems falling within their jurisdiction, in accordance with their national laws and regulations, and without any discrimination on ground of nationality of nationals of Member States, including for the purposes of security audits and tests as decided by the Security Accreditation Board and of the security risk monitoring process referred to in Article 10(h). These audits and tests shall be performed in accordance with the following principles:

   1. (i)

      the importance of security and effective risk management within the entities inspected shall be emphasised;

   2. (ii)

      countermeasures to mitigate the specific impact of loss of confidentiality, integrity or availability of classified information shall be recommended;

3. (c)

   each be responsible for devising a template for access control, which is to outline or list the areas/sites to be accredited, and which shall be agreed in advance between the Member States and the Security Accreditation Board, thereby ensuring that the same level of access control is being provided by all Member States;

4. (d)

   be responsible, at local level, for the accreditation of the security of areas that are located within their territory and form part of the security accreditation area for European GNSS systems, and report, to this end, to the Security Accreditation Board.