Konstantinos Arvanitis

3. All Union institutions and bodies shall ensure the integrity and availability of information for public use by appropriate measures based on their security needs and accounting...

2. The Coordination Group shall adopt guidance documents on EUCI creation and classification. Such documents shall take into account both the principle of minimisation of the use of classified...

(f) business continuity, crisis management and disaster recovery;

2. Union institutions and bodies may mark with ‘PUBLIC USE’ the information referred to in paragraph 1. The absence of such marking shall not give rise to a presumption that the information...

1. Union institutions and bodies shall categorise, handle and stored as sensitive non-classified all information that is not classified but which they must protect due to legal obligations or...

1. Union institutions and bodies shall establish uniform procedures for the reporting and management of any incident or suspected incident that could lead to a compromise of the security...

(a a) the risks to the rights and freedoms of natural persons;

(1 a) Given that Union institutions are obliged to apply Article 15(3) of the Treaty on the Functioning of the European Union ("TFEU") in line with democratic principles, in particular those...

(e a) monitor compliance by Union institutions and bodies with this Regulation, as well as with the guidance documents established pursuant to point (c) through the adoption of a yearly...

(d) end-to-end encryption of information at all stages of the relevant processes;

2. Normal information may be marked visually or in metadata where necessary to ensure its protection, particularly where shared outside Union institutions and bodies. The marking ‘EU NORMAL’ or the...

deleted

(3 b) In the context of information security, Union institutions and bodies should increase organisational interoperability and take joint action to ensure that networks, information systems,...

4. Sensitive non-classified information shall be exchanged outside Union institutions and bodies only with natural and legal persons that have a need- to-know while respecting the handling...

(1) Union institutions and bodies currently have their own information security rules, based on their rules of procedure or their founding act, or do not have such rules at all. In that context,...

(5 a) Sharing of EUCI in a transparent and timely manner is paramount for the proper functioning of Union institutions and bodies. When implementing this Regulation, Union institutions and...

(8) With a view to establishing a formal common and uniform structure for cooperation between Union institutions and bodies in the field of information security, it is necessary to set...

(10) The Coordination Group should closely cooperate with the Classification Authorities of the Member States with a view to enhancing information security in the Union. An Information...

(14) With the purpose of adjusting to the new teleworking practices, the network information systems, digital infrastructure, and terminal devices used for connecting to the Union...

(18) The protection of EUCI is also ensured by technical and organisational measures which apply to the premises, buildings, rooms, offices or facilities of the Union institutions and bodies where...

(21) Union institutions and bodies have been traditionally developed their communication and information systems autonomously, with insufficient attention to their interoperability across all Union...

(21 a) Information held by the Union entities is also exchanged through the ICT environment, on-premises or through virtual assets, ICT products, ICT services and ICT processes, as well as...

1. This Regulation lays down a minimum set of common and uniform information security rules for all Union institutions and bodies.

1 a. This Regulation is without prejudice to Regulation (Euratom) No 3/1958[1], Regulation No 31 (EEC), 11 (EAEC), laying down the Staff Regulations of Officials and the Conditions of...

(3 a) Article 15 of the Treaty on the Functioning of the European Union stipulates that the Unions’ institutions, bodies, offices and agencies are to conduct their work as openly as possible,...

3. These levels are based on the damage that unauthorised disclosure may cause to the legitimate public interests, including those of the Union, Union institutions and bodies and Member States or...

3. Without prejudice to Article 15 TFEU, Union institutions and bodies shall assess all information they handle and store in order to categorise it in accordance with the confidentiality...

Union institutions and bodies handling and storing EUCI shall organise mandatory training at least once every 5 years for all individuals authorised to access EUCI. The Union institutions and...

(4) The recent pandemic expedited the significant underlying transformation in working practices, with remote communication tools becoming the rule. Therefore, many...

3 a. This Article is without prejudice to Regulation (EC) No 1049/2001.