21.

Awareness of the risks and available security measures is the first line of defence for the security of CIS. In particular all personnel involved in the life-cycle of CIS, including users, shall understand: that security failures may significantly harm the CIS; the potential harm to others which may arise from interconnectivity and interdependency; and their individual responsibility and accountability for the security of CIS according to their roles within the systems and processes.

← Information Assurance awareness · All articles · anx_IV__cpt_1__cpt_2__cpt_6__point_21__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.