# Commission Implementing Regulation (EU) 2019/917 of 4 June 2019 establishing technical specifications, measures and other requirements required for the system of interconnection of insolvency registers in accordance with Article 25 of Regulation (EU) 2015/848 of the European Parliament and of the Council, Division 5: Security standards

Extent: E+W+S+N.I.

For the communication and distribution of information via IRI, the technical measures for ensuring minimum information technology security standards shall include:
(a) measures to ensure confidentiality of information, including by using secure channels (HTTPS);
(b) measures to ensure the integrity of data while being exchanged;
(c) measures to ensure the non-repudiation of origin of the sender of information within IRI and the non-repudiation of receipt of information;
(d) measures to ensure logging of security events in line with recognized international recommendations for information technology security standards;
(e) measures to ensure the authentication and authorisation of any registered users and measures to verify the identity of systems connected to the portal, the platform or the registers within IRI;
(f) measures to protect against automated searches, such as using the captcha module, and copying of registers, such as limiting the results returned by each register to a maximum number.

---
Source: https://www.legislation.gov.uk/eur/2019/917/annex/division/5 (the official version)
Page: https://openlegislation.uk/eu-regulation-2019-917/annex/division-5
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.