Having regard to the Treaty on the Functioning of the European Union, and in particular Article thereof,. Having regard to the Treaty establishing the European Atomic Energy Community, and in particular Article thereof,. Having regard to the Protocol No 7 on the Privileges and Immunities of the European Union annexed to the Treaties, and in particular Article 18 thereof,.
The Commission's security provisions regarding the protection of European Union Classified Information EUCI need to be reviewed and updated, taking into account institutional, organisational, operational and technological developments. The European Commission has entered into instruments on security matters for its principal sites with the governments of Belgium, Luxembourg and Italy 1.
It is important that, where appropriate, the European Parliament and other Union institutions, agencies, bodies or offices, are associated with the principles, standards and rules for protecting classified information which are necessary in order to protect the interests of the Union and its Member States. Risk to EUCI shall be managed as a process.
This process shall be aimed at determining known security risks, defining security measures to reduce such risks to an acceptable level in accordance with the basic principles and minimum standards set out in this Decision and at applying these measures in line with the concept of defence in depth. The effectiveness of such measures shall be continuously evaluated.
Within the Commission, physical security aimed at protecting classified information is the application of physical and technical protective measures intended to prevent unauthorised access to EUCI. The management of EUCI is the application of administrative measures for controlling EUCI throughout its life-cycle to supplement the measures provided for in Chapters 2, 3 and 5 of this Decision and thereby help deter, detect and recover from deliberate or accidental compromise or loss of such information.
