# Commission Implementing Regulation (EU) 2019/1799 of 22 October 2019 laying down technical specifications for individual online collection systems pursuant to Regulation (EU) 2019/788 of the European Parliament and of the Council on the European citizens’ initiative, Division 4.2.2: Organisers shall provide documentation showing that they:

Extent: E+W+S+N.I.

(a) have assessed the risks of the system;
(b) have determined appropriate measures to prevent and mitigate the impact of incidents affecting the security of the system;
(c) have identified the residual risks;
(d) have implemented the measures and verified their implementation;
(e) have provided the organisational means to receive information on new threats and security improvements;
(f) comply throughout the collection process with the certification requirements laid down in Article 11(4) of Regulation (EU) 2019/788, including having in place the necessary processes to ensure this.

---
Source: https://www.legislation.gov.uk/eur/2019/1799/annex/division/4/division/4.2/division/4.2.2 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-1799/annex/division-4/division-4.2/division-4.2.2
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.