16.

2013/488/EU: Council Decision of 23 September 2013 on the security rules for protecting EU classified information · European Union

To mitigate risk to CIS, a range of technical and non-technical security measures, organised as multiple layers of defence, shall be implemented. These layers shall include: Deterrence: security measures aimed at dissuading any adversary planning to attack the CIS; Prevention: security measures aimed at impeding or blocking an attack on the CIS; Detection: security measures aimed at discovering the occurrence of an attack on the CIS; Resilience: security measures aimed at limiting impact of an attack to a minimum set of information or CIS assets and preventing further damage; and Recovery: security measures aimed at regaining a secure situation for the CIS. The degree of stringency of such security measures shall be determined following a risk assessment.

← Defence in depth · All articles · anx_IV__cpt_1__cpt_2__cpt_4__point_16__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.