4.

EUCI shall be conveyed between services and premises outside physically protected areas as follows: as a general rule, EUCI shall be transmitted by electronic means protected by cryptographic products approved in accordance with Article 10(6); when the means referred to in point (a) are not used, EUCI shall be carried either: on electronic media (e.g. USB sticks, CDs, hard drives) protected by cryptographic products approved in accordance with Article 10(6); or in all other cases, as prescribed by the competent security authority in accordance with the relevant protective measures laid down in Annex III.

← art_9__para_3__text_1 · All articles · art_9__para_4__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-11-01 · Text as adopted (Official Journal); later amendments are not incorporated in this text.