# Commission Implementing Regulation (EU) 2019/1799 of 22 October 2019 laying down technical specifications for individual online collection systems pursuant to Regulation (EU) 2019/788 of the European Parliament and of the Council on the European citizens’ initiative, Division 4.2.1: Organisers shall use risk management processes to identify the risks linked to the use of their systems, including for the rights and freedoms of signatories, and to determine the appropriate and proportional measures to prevent and mitigate the impact of incidents affecting the security of the network and information systems that they use in their operations.

Extent: E+W+S+N.I.

The risk management process shall focus particularly on the risks related to the confidentiality and integrity of the information in the system. These risks can be the result of threats, including:
(a) user errors;
(b) system/security administrator errors;
(c) configuration errors;
(d) malware infection;
(e) accidental alteration of information;
(f) information disclosure or leaks;
(g) software vulnerabilities;
(h) unauthorised access;
(i) interception or eavesdropping of traffic;
(j) data protection risks.

---
Source: https://www.legislation.gov.uk/eur/2019/1799/annex/division/4/division/4.2/division/4.2.1 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-1799/annex/division-4/division-4.2/division-4.2.1
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.