Security throughout the CIS life-cycle

2013/488/EU: Council Decision of 23 September 2013 on the security rules for protecting EU classified information · European Union

Ensuring security shall be a requirement throughout the entire CIS life-cycle from initiation to withdrawal from service. The role and interaction of each actor involved in a CIS with regard to its security shall be identified for each phase of the life-cycle. Any CIS, including its technical and non-technical security measures, shall be subject to security testing during the accreditation process to ensure that the appropriate level of assurance is obtained and to verify that they are correctly implemented, integrated and configured. Security assessments, inspections and reviews shall be performed periodically during the operation and maintenance of a CIS and when exceptional circumstances arise. Security documentation for a CIS shall evolve over its life-cycle as an integral part of the process of change and configuration management.

← anx_IV__cpt_1__cpt_2__cpt_1__point_7__text_1 · All articles · 8. →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.