# Commission Delegated Regulation (EU) 2018/573 of 15 December 2017 on key elements of data storage contracts to be concluded as part of a traceability system for tobacco products (Text with EEA relevance), Article 10: Information security management

Extent: E+W+S+N.I.

The contract shall require providers to declare that the primary repository and, where applicable, the second repository, is managed in accordance with internationally recognised information security management standards. Providers certified to ISO/IEC 27001:2013 shall be presumed to meet those standards.

---
Source: https://www.legislation.gov.uk/eur/2018/573/article/10 (the official version)
Page: https://openlegislation.uk/eu-regulation-2018-573/article-10
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.