Article 1. . . . . . . . . ....
Article 2. . . . . . . . . ....
Article 3. . . . . . . . . ....
Article 4. . . . . . . . . ....
Article 5. . . . . . . . . ....
ANNEXSECURITY REGULATIONS OF THE COUNCIL OF THE EUROPEAN UNION
PART IBASIC PRINCIPLES AND MINIMUM STANDARDS OF SECURITY
INTRODUCTION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
BASIC PRINCIPLES
7.. . . . . . . . . ....
ORGANISATION OF SECURITY
Common minimum standards
8.. . . . . . . . . ....
SECURITY OF PERSONNEL
Clearance of personnel
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Records of personnel clearances
11.. . . . . . . . . ....
Security instruction of personnel
12.. . . . . . . . . ....
Management responsibilities
13.. . . . . . . . . ....
Security status of personnel
14.. . . . . . . . . ....
PHYSICAL SECURITY
Need for protection
15.. . . . . . . . . ....
Checking
16.. . . . . . . . . ....
Security of buildings
17.. . . . . . . . . ....
18.. . . . . . . . . ....
Contingency plans
19.. . . . . . . . . ....
SECURITY OF INFORMATION (INFOSEC)
20.. . . . . . . . . ....
COUNTER-SABOTAGE AND OTHER FORMS OF MALICIOUS WILFUL DAMAGE
21.. . . . . . . . . ....
RELEASE OF CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS...
22.. . . . . . . . . ....
23.. . . . . . . . . ....
24.. . . . . . . . . ....
PART II
SECTION ITHE ORGANISATION OF SECURITY IN THE COUNCIL OF THE EUROPEAN UNION
The Secretary-General/High Representative
1.. . . . . . . . . ....
2.. . . . . . . . . ....
The Security Committee of the Council
3.. . . . . . . . . ....
4.. . . . . . . . . ....
The Security Office of the General Secretariat of the Council...
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
EU decentralised agencies
8.. . . . . . . . . ....
Member States
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Mutual security inspections
11.. . . . . . . . . ....
12.. . . . . . . . . ....
SECTION IICLASSIFICATIONS AND MARKINGS
LEVELS OF CLASSIFICATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
MARKINGS
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
AFFIXING OF CLASSIFICATION AND MARKINGS
8.. . . . . . . . . ....
SECTION IIICLASSIFICATION MANAGEMENT
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
APPLICATION OF CLASSIFICATIONS
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
DOWNGRADING AND DECLASSIFICATION
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECTION IVPHYSICAL SECURITY
GENERAL
1.. . . . . . . . . ....
SECURITY REQUIREMENTS
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
PHYSICAL SECURITY MEASURES
Security areas
5.. . . . . . . . . ....
Administrative area
6.. . . . . . . . . ....
Entry and exit controls
7.. . . . . . . . . ....
Guard patrols
8.. . . . . . . . . ....
Security containers and strong rooms
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Locks
11.. . . . . . . . . ....
Control of keys and combinations
12.. . . . . . . . . ....
13.. . . . . . . . . ....
Intrusion detection devices
14.. . . . . . . . . ....
Approved equipment
15.. . . . . . . . . ....
Physical protection of copying and telefax machines
16.. . . . . . . . . ....
PROTECTION AGAINST OVERLOOKING AND EAVESDROPPING
Overlooking
17.. . . . . . . . . ....
Eavesdropping
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
TECHNICALLY SECURE AREAS
21.. . . . . . . . . ....
22.. . . . . . . . . ....
SECTION VGENERAL RULES ON THE NEED-TO-KNOW PRINCIPLE AND SECURITY CLEARANCE
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
SPECIFIC RULES ON ACCESS TO TRÈS SECRET UE/EU TOP SECRET...
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
SPECIFIC RULES ON ACCESS TO SECRET UE AND CONFIDENTIEL UE...
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
SPECIFIC RULES ON ACCESS TO RESTREINT UE INFORMATION
13.. . . . . . . . . ....
TRANSFERS
14.. . . . . . . . . ....
SPECIAL INSTRUCTIONS
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
SECTION VISECURITY CLEARANCE PROCEDURE FOR GSC OFFICIALS AND OTHER SERVANTS
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
SECTION VIIPREPARATION, DISTRIBUTION, TRANSMISSION, STORAGE AND DESTRUCTION OF EU CLASSIFIED MATERIAL
General provisions
Chapter IPreparation and distribution of EU classified documents
PREPARATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
DISTRIBUTION
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
Chapter IITransmission of EU classified documents
PACKAGING
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
TRANSMISSION WITHIN A BUILDING OR GROUP OF BUILDINGS
12.. . . . . . . . . ....
TRANSMISSION OF EU DOCUMENTS WITHIN A COUNTRY
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
TRANSMISSION FROM ONE MEMBER STATE TO ANOTHER
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
TRANSMISSION OF RESTREINT UE DOCUMENTS
21.. . . . . . . . . ....
COURIER PERSONNEL SECURITY
22.. . . . . . . . . ....
Chapter IIIElectrical and other means of technical transmission
23.. . . . . . . . . ....
24.. . . . . . . . . ....
Chapter IVExtra copies and translations of and extracts from EU classified...
25.. . . . . . . . . ....
26.. . . . . . . . . ....
27.. . . . . . . . . ....
Chapter VMusters and checks, storage and destruction of EU classified documents...
MUSTERS AND CHECKS
28.. . . . . . . . . ....
ARCHIVE STORAGE OF EU CLASSIFIED INFORMATION
29.. . . . . . . . . ....
30.. . . . . . . . . ....
ROUTINE DESTRUCTION OF EU CLASSIFIED DOCUMENTS
31.. . . . . . . . . ....
32.. . . . . . . . . ....
33.. . . . . . . . . ....
34.. . . . . . . . . ....
DESTRUCTION IN EMERGENCIES
35.. . . . . . . . . ....
36.. . . . . . . . . ....
CHAPTER VISpecific rules applicable to documents intended for the Council
37.. . . . . . . . . ....
38.. . . . . . . . . ....
39.. . . . . . . . . ....
SECTION VIIITRÈS SECRET UE/EU TOP SECRET REGISTRIES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
CENTRAL TRÈS SECRET UE/EU TOP SECRET REGISTRIES
7.. . . . . . . . . ....
TRÈS SECRET UE/EU TOP SECRET SUBREGISTRIES
8.. . . . . . . . . ....
INVENTORIES
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
SECTION IXSECURITY MEASURES TO BE APPLIED AT THE TIME OF SPECIFIC MEETINGS HELD OUTSIDE THE COUNCIL PREMISES AND INVOLVING HIGH SENSITIVITY ISSUES
GENERAL
1.. . . . . . . . . ....
RESPONSIBILITIES
Host Member States
2.. . . . . . . . . ....
Member States
3.. . . . . . . . . ....
Meeting Security Officer
4.. . . . . . . . . ....
GSC Security Office
5.. . . . . . . . . ....
6.. . . . . . . . . ....
SECURITY MEASURES
Security areas
7.. . . . . . . . . ....
Passes
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Control of photographic and audio equipment
11.. . . . . . . . . ....
Checking of briefcases, portable computers and packages
12.. . . . . . . . . ....
Technical security
13.. . . . . . . . . ....
Delegations' documents
14.. . . . . . . . . ....
Safe custody of documents
15.. . . . . . . . . ....
Inspection of offices
16.. . . . . . . . . ....
Disposal of EU classified waste
17.. . . . . . . . . ....
18.. . . . . . . . . ....
SECTION XBREACHES OF SECURITY AND COMPROMISE OF EU CLASSIFIED INFORMATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECTION XIPROTECTION OF INFORMATION HANDLED IN INFORMATION TECHNOLOGY AND COMMUNICATION SYSTEMS
Chapter IIntroduction
GENERAL ASPECTS
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
THREATS TO, AND VULNERABILITIES OF SYSTEMS
4.. . . . . . . . . ....
5.. . . . . . . . . ....
SECURITY MEASURES
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
SYSTEM-SPECIFIC SECURITY REQUIREMENT STATEMENT (SSRS)
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
SECURITY MODES OF OPERATION
13.. . . . . . . . . ....
Chapter IIDefinitions
ADDITIONAL MARKINGS
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
21.. . . . . . . . . ....
22.. . . . . . . . . ....
23.. . . . . . . . . ....
24.. . . . . . . . . ....
25.. . . . . . . . . ....
26.. . . . . . . . . ....
27.. . . . . . . . . ....
28.. . . . . . . . . ....
29.. . . . . . . . . ....
30.. . . . . . . . . ....
31.. . . . . . . . . ....
Chapter IIISecurity responsibilities
GENERALITIES
32.. . . . . . . . . ....
33.. . . . . . . . . ....
34.. . . . . . . . . ....
SECURITY ACCREDITATION AUTHORITY (SAA)
35.. . . . . . . . . ....
36.. . . . . . . . . ....
INFOSEC AUTHORITY (IA)
37.. . . . . . . . . ....
IT SYSTEM OPERATIONAL AUTHORITY (ITSOA)
38.. . . . . . . . . ....
39.. . . . . . . . . ....
40.. . . . . . . . . ....
USERS
41.. . . . . . . . . ....
INFOSEC TRAINING
42.. . . . . . . . . ....
Chapter IVNon-technical security measures
PERSONNEL SECURITY
43.. . . . . . . . . ....
44.. . . . . . . . . ....
45.. . . . . . . . . ....
PHYSICAL SECURITY
46.. . . . . . . . . ....
47.. . . . . . . . . ....
CONTROL OF ACCESS TO A SYSTEM
48.. . . . . . . . . ....
49.. . . . . . . . . ....
Chapter VTechnical security measures
SECURITY OF INFORMATION
50.. . . . . . . . . ....
51.. . . . . . . . . ....
52.. . . . . . . . . ....
53.. . . . . . . . . ....
54.. . . . . . . . . ....
55.. . . . . . . . . ....
CONTROL AND ACCOUNTABILITY OF INFORMATION
56.. . . . . . . . . ....
57.. . . . . . . . . ....
58.. . . . . . . . . ....
HANDLING AND CONTROL OF REMOVABLE COMPUTER STORAGE MEDIA
59.. . . . . . . . . ....
60.. . . . . . . . . ....
DECLASSIFICATION AND DESTRUCTION OF COMPUTER STORAGE MEDIA
61.. . . . . . . . . ....
62.. . . . . . . . . ....
63.. . . . . . . . . ....
COMMUNICATIONS SECURITY
64.. . . . . . . . . ....
65.. . . . . . . . . ....
66.. . . . . . . . . ....
67.. . . . . . . . . ....
68.. . . . . . . . . ....
69.. . . . . . . . . ....
INSTALLATION AND RADIATION SECURITY
70.. . . . . . . . . ....
71.. . . . . . . . . ....
72.. . . . . . . . . ....
73.. . . . . . . . . ....
Chapter VISecurity during handling
SECURITY OPERATING PROCEDURES
74.. . . . . . . . . ....
SOFTWARE PROTECTION/CONFIGURATION MANAGEMENT
75.. . . . . . . . . ....
76.. . . . . . . . . ....
CHECKING FOR THE PRESENCE OF MALICIOUS SOFTWARE/COMPUTER VIRUSES
77.. . . . . . . . . ....
78.. . . . . . . . . ....
MAINTENANCE
79.. . . . . . . . . ....
80.. . . . . . . . . ....
Chapter VIIProcurement
81.. . . . . . . . . ....
82.. . . . . . . . . ....
ACCREDITATION
83.. . . . . . . . . ....
84.. . . . . . . . . ....
EVALUATION AND CERTIFICATION
85.. . . . . . . . . ....
86.. . . . . . . . . ....
87.. . . . . . . . . ....
88.. . . . . . . . . ....
89.. . . . . . . . . ....
ROUTINE CHECKING OF SECURITY FEATURES FOR CONTINUED ACCREDITATION
90.. . . . . . . . . ....
91.. . . . . . . . . ....
92.. . . . . . . . . ....
Chapter VIIITemporary or occasional use
SECURITY OF MICROCOMPUTERS/PERSONAL COMPUTERS
93.. . . . . . . . . ....
94.. . . . . . . . . ....
USE OF PRIVATELY-OWNED IT EQUIPMENT FOR OFFICIAL COUNCIL WORK
95.. . . . . . . . . ....
96.. . . . . . . . . ....
USE OF THE CONTRACTOR-OWNED OR NATIONALLY-SUPPLIED IT EQUIPMENT FOR OFFICIAL...
97.. . . . . . . . . ....
SECTION XIIRELEASE OF EU CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS
PRINCIPLES REGULATING THE RELEASE OF EU CLASSIFIED INFORMATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
LEVELS
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
THE AGREEMENTS
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECTION XIIICOMMON MINIMUM STANDARDS ON INDUSTRIAL SECURITY
1.. . . . . . . . . ....
DEFINITIONS
2.For the purposes of these common minimum standards, the following...
ORGANISATION
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
CLASSIFIED CONTRACTS
8.The security classification of classified contracts must take account of...
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
21.. . . . . . . . . ....
22.. . . . . . . . . ....
VISITS
23.. . . . . . . . . ....
TRANSMISSION AND TRANSPORTATION OF EU CLASSIFIED INFORMATION
24.. . . . . . . . . ....
25.The international transportation of EU classified material relating to classified...
Appendix 1
List of national security authorities
BELGIUM
BULGARIA
CZECH REPUBLIC
DENMARK
GERMANY
ESTONIA
GREECE
SPAIN
FRANCE
IRELAND
ITALY
CYPRUS
LATVIA
LITHUANIA
LUXEMBOURG
HUNGARY
MALTA
NETHERLANDS
AUSTRIA
POLAND
PORTUGAL
ROMANIA
SLOVENIA
SLOVAKIA
FINLAND
SWEDEN
UNITED KINGDOM
Appendix 2
Appendix 3Practical classification guide
. . . . . . . . . ....
Appendix 4Guidelines for release of EU classified information to third States or international organisations
Level 1 Cooperation
PROCEDURES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
SECURITY REGULATIONS TO BE APPLIED BY BENEFICIARIES
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
Appendix 5Guidelines for release of EU classified information to third States or international organisations
Level 2 Cooperation
PROCEDURES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
SECURITY REGULATIONS TO BE APPLIED BY BENEFICIARIES
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
Appendix 6Guidelines for release of EU classified information to third States or international organisations
Level 3 Cooperation
PROCEDURES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECURITY REGULATIONS TO BE APPLIED BY BENEFICIARIES
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....

Council Decision

of 19 March 2001

adopting the Council's security regulations

(2001/264/EC) (repealed)

F1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .