# Commission Implementing Regulation (EU) 2019/1799 of 22 October 2019 laying down technical specifications for individual online collection systems pursuant to Regulation (EU) 2019/788 of the European Parliament and of the Council on the European citizens’ initiative, Division 4.2.3: The measures to prevent and mitigate the impact of incidents affecting the security of the systems shall cover the following domains:

Extent: E+W+S+N.I.

(a) human resource security;
(b) access control;
(c) cryptographic controls;
(d) physical and environmental security;
(e) operations security;
(f) communications security;
(g) system acquisition, development and maintenance;
(h) information security incident management;
(i) compliance.
Application of these security measures may be limited to the parts of the organisation that are relevant for the online collection system. For instance, human resources security may be limited to any staff that has physical or logical access to the online collection system, and physical/environmental security may be limited to the building(s) hosting the system.

---
Source: https://www.legislation.gov.uk/eur/2019/1799/annex/division/4/division/4.2/division/4.2.3 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-1799/annex/division-4/division-4.2/division-4.2.3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.