Konstantinos Arvanitis

(3 b) In the context of information security, Union institutions and bodies should increase organisational interoperability and take joint action to ensure that networks, information systems,...

3. All Union institutions and bodies shall ensure the integrity and availability of information for public use by appropriate measures based on their security needs and accounting...

deleted

(1 a) Given that Union institutions are obliged to apply Article 15(3) of the Treaty on the Functioning of the European Union ("TFEU") in line with democratic principles, in particular those...

(a a) the risks to the rights and freedoms of natural persons;

2. Union institutions and bodies may mark with ‘PUBLIC USE’ the information referred to in paragraph 1. The absence of such marking shall not give rise to a presumption that the information...

(a) each page shall be marked clearly with the classification level and the duration of classification;

1. The Union institution or body under whose authority an EUCI document is created shall have originator control over that document. The originator shall determine the classification level of the...

2. At the time of creation of EUCI, the originator shall indicate whether the EUCI can be downgraded or declassified on a given date or following a specific event.

(1) Union institutions and bodies currently have their own information security rules, based on their rules of procedure or their founding act, or do not have such rules at all. In that context,...

(18) The protection of EUCI is also ensured by technical and organisational measures which apply to the premises, buildings, rooms, offices or facilities of the Union institutions and bodies where...

1 a. This Regulation is without prejudice to Regulation (Euratom) No 3/1958[1], Regulation No 31 (EEC), 11 (EAEC), laying down the Staff Regulations of Officials and the Conditions of...

(e a) monitor compliance by Union institutions and bodies with this Regulation, as well as with the guidance documents established pursuant to point (c) through the adoption of a yearly...

(d) end-to-end encryption of information at all stages of the relevant processes;

(21 a) Information held by the Union entities is also exchanged through the ICT environment, on-premises or through virtual assets, ICT products, ICT services and ICT processes, as well as...

2. The Coordination Group shall adopt guidance documents on EUCI creation and classification. Such documents shall take into account both the principle of minimisation of the use of classified...

3. These levels are based on the damage that unauthorised disclosure may cause to the legitimate public interests, including those of the Union, Union institutions and bodies and Member States or...

3. Without prejudice to Article 15 TFEU, Union institutions and bodies shall assess all information they handle and store in order to categorise it in accordance with the confidentiality...

Union institutions and bodies handling and storing EUCI shall organise mandatory training at least once every 5 years for all individuals authorised to access EUCI. The Union institutions and...

(3 a) Article 15 of the Treaty on the Functioning of the European Union stipulates that the Unions’ institutions, bodies, offices and agencies are to conduct their work as openly as possible,...

(4) The recent pandemic expedited the significant underlying transformation in working practices, with remote communication tools becoming the rule. Therefore, many...

2. The sub-group on EUCI sharing and exchange of classified information shall be composed of representatives from the European Parliament, the Commission, the Council and the European...

(8) With a view to establishing a formal common and uniform structure for cooperation between Union institutions and bodies in the field of information security, it is necessary to set...

(10) The Coordination Group should closely cooperate with the Classification Authorities of the Member States with a view to enhancing information security in the Union. An Information...

(5 a) Sharing of EUCI in a transparent and timely manner is paramount for the proper functioning of Union institutions and bodies. When implementing this Regulation, Union institutions and...

1. This Regulation lays down a minimum set of common and uniform information security rules for all Union institutions and bodies.

(14) With the purpose of adjusting to the new teleworking practices, the network information systems, digital infrastructure, and terminal devices used for connecting to the Union...

(f) business continuity, crisis management and disaster recovery;

(21) Union institutions and bodies have been traditionally developed their communication and information systems autonomously, with insufficient attention to their interoperability across all Union...

2. Normal information may be marked visually or in metadata where necessary to ensure its protection, particularly where shared outside Union institutions and bodies. The marking ‘EU NORMAL’ or the...