# Commission Implementing Regulation (EU) 2020/2244 of 17 December 2020 laying down rules for the application of Directive (EU) 2017/1132 of the European Parliament and of the Council as regards technical specifications and procedures for the system of interconnection of registers and repealing Commission Implementing Regulation (EU) 2015/884 (Text with EEA relevance), Division 3: Security standards

Extent: E+W+S+N.I.

For the communication and distribution of information via BRIS, the technical measures for ensuring minimum information technology security standards shall include:
(a) measures to ensure confidentiality of information, including by using secure channels (HTTPS);
(b) measures to ensure the integrity of data while being exchanged;
(c) measures to ensure the non-repudiation of origin of the sender of information within BRIS and the non-repudiation of receipt of information;
(d) measures to ensure logging of security events in line with recognized international recommendations for information technology security standards;
(e) measures to ensure the authentication and authorisation of any registered users and measures to verify the identity of systems connected to the portal, the platform or the registers within BRIS.

---
Source: https://www.legislation.gov.uk/eur/2020/2244/annex/division/3 (the official version)
Page: https://openlegislation.uk/eu-regulation-2020-2244/annex/division-3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.