Article 1. . . . . . . . . ....
Article 2. . . . . . . . . ....
Article 3. . . . . . . . . ....
Article 4. . . . . . . . . ....
Article 5. . . . . . . . . ....
ANNEX
SECURITY REGULATIONS OF THE COUNCIL OF THE EUROPEAN UNION
PART I
BASIC PRINCIPLES AND MINIMUM STANDARDS OF SECURITY
INTRODUCTION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
BASIC PRINCIPLES
7.. . . . . . . . . ....
ORGANISATION OF SECURITY
Common minimum standards
8.. . . . . . . . . ....
SECURITY OF PERSONNEL
Clearance of personnel
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Records of personnel clearances
11.. . . . . . . . . ....
Security instruction of personnel
12.. . . . . . . . . ....
Management responsibilities
13.. . . . . . . . . ....
Security status of personnel
14.. . . . . . . . . ....
PHYSICAL SECURITY
Need for protection
15.. . . . . . . . . ....
Checking
16.. . . . . . . . . ....
Security of buildings
17.. . . . . . . . . ....
18.. . . . . . . . . ....
Contingency plans
19.. . . . . . . . . ....
SECURITY OF INFORMATION (INFOSEC)
20.. . . . . . . . . ....
COUNTER-SABOTAGE AND OTHER FORMS OF MALICIOUS WILFUL DAMAGE
21.. . . . . . . . . ....
RELEASE OF CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS...
22.. . . . . . . . . ....
23.. . . . . . . . . ....
24.. . . . . . . . . ....
PART II
SECTION I
THE ORGANISATION OF SECURITY IN THE COUNCIL OF THE EUROPEAN UNION
The Secretary-General/High Representative
1.. . . . . . . . . ....
2.. . . . . . . . . ....
The Security Committee of the Council
3.. . . . . . . . . ....
4.. . . . . . . . . ....
The Security Office of the General Secretariat of the Council...
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
EU decentralised agencies
8.. . . . . . . . . ....
Member States
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Mutual security inspections
11.. . . . . . . . . ....
12.. . . . . . . . . ....
SECTION II
CLASSIFICATIONS AND MARKINGS
LEVELS OF CLASSIFICATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
MARKINGS
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
AFFIXING OF CLASSIFICATION AND MARKINGS
8.. . . . . . . . . ....
SECTION III
CLASSIFICATION MANAGEMENT
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
APPLICATION OF CLASSIFICATIONS
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
DOWNGRADING AND DECLASSIFICATION
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECTION IV
PHYSICAL SECURITY
GENERAL
1.. . . . . . . . . ....
SECURITY REQUIREMENTS
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
PHYSICAL SECURITY MEASURES
Security areas
5.. . . . . . . . . ....
Administrative area
6.. . . . . . . . . ....
Entry and exit controls
7.. . . . . . . . . ....
Guard patrols
8.. . . . . . . . . ....
Security containers and strong rooms
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Locks
11.. . . . . . . . . ....
Control of keys and combinations
12.. . . . . . . . . ....
13.. . . . . . . . . ....
Intrusion detection devices
14.. . . . . . . . . ....
Approved equipment
15.. . . . . . . . . ....
Physical protection of copying and telefax machines
16.. . . . . . . . . ....
PROTECTION AGAINST OVERLOOKING AND EAVESDROPPING
Overlooking
17.. . . . . . . . . ....
Eavesdropping
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
TECHNICALLY SECURE AREAS
21.. . . . . . . . . ....
22.. . . . . . . . . ....
SECTION V
GENERAL RULES ON THE NEED-TO-KNOW PRINCIPLE AND SECURITY CLEARANCE
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
SPECIFIC RULES ON ACCESS TO TRÈS SECRET UE/EU TOP SECRET...
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
SPECIFIC RULES ON ACCESS TO SECRET UE AND CONFIDENTIEL UE...
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
SPECIFIC RULES ON ACCESS TO RESTREINT UE INFORMATION
13.. . . . . . . . . ....
TRANSFERS
14.. . . . . . . . . ....
SPECIAL INSTRUCTIONS
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
SECTION VI
SECURITY CLEARANCE PROCEDURE FOR GSC OFFICIALS AND OTHER SERVANTS
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
SECTION VII
PREPARATION, DISTRIBUTION, TRANSMISSION, STORAGE AND DESTRUCTION OF EU CLASSIFIED MATERIAL
General provisions
Chapter I
Preparation and distribution of EU classified documents
PREPARATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
DISTRIBUTION
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
Chapter II
Transmission of EU classified documents
PACKAGING
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
TRANSMISSION WITHIN A BUILDING OR GROUP OF BUILDINGS
12.. . . . . . . . . ....
TRANSMISSION OF EU DOCUMENTS WITHIN A COUNTRY
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
TRANSMISSION FROM ONE MEMBER STATE TO ANOTHER
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
TRANSMISSION OF RESTREINT UE DOCUMENTS
21.. . . . . . . . . ....
COURIER PERSONNEL SECURITY
22.. . . . . . . . . ....
Chapter III
Electrical and other means of technical transmission
23.. . . . . . . . . ....
24.. . . . . . . . . ....
Chapter IV
Extra copies and translations of and extracts from EU classified...
25.. . . . . . . . . ....
26.. . . . . . . . . ....
27.. . . . . . . . . ....
Chapter V
Musters and checks, storage and destruction of EU classified documents...
MUSTERS AND CHECKS
28.. . . . . . . . . ....
ARCHIVE STORAGE OF EU CLASSIFIED INFORMATION
29.. . . . . . . . . ....
30.. . . . . . . . . ....
ROUTINE DESTRUCTION OF EU CLASSIFIED DOCUMENTS
31.. . . . . . . . . ....
32.. . . . . . . . . ....
33.. . . . . . . . . ....
34.. . . . . . . . . ....
DESTRUCTION IN EMERGENCIES
35.. . . . . . . . . ....
36.. . . . . . . . . ....
CHAPTER VI
Specific rules applicable to documents intended for the Council
37.. . . . . . . . . ....
38.. . . . . . . . . ....
39.. . . . . . . . . ....
SECTION VIII
TRÈS SECRET UE/EU TOP SECRET REGISTRIES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
CENTRAL TRÈS SECRET UE/EU TOP SECRET REGISTRIES
7.. . . . . . . . . ....
TRÈS SECRET UE/EU TOP SECRET SUBREGISTRIES
8.. . . . . . . . . ....
INVENTORIES
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
SECTION IX
SECURITY MEASURES TO BE APPLIED AT THE TIME OF SPECIFIC MEETINGS HELD OUTSIDE THE COUNCIL PREMISES AND INVOLVING HIGH SENSITIVITY ISSUES
GENERAL
1.. . . . . . . . . ....
RESPONSIBILITIES
Host Member States
2.. . . . . . . . . ....
Member States
3.. . . . . . . . . ....
Meeting Security Officer
4.. . . . . . . . . ....
GSC Security Office
5.. . . . . . . . . ....
6.. . . . . . . . . ....
SECURITY MEASURES
Security areas
7.. . . . . . . . . ....
Passes
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
Control of photographic and audio equipment
11.. . . . . . . . . ....
Checking of briefcases, portable computers and packages
12.. . . . . . . . . ....
Technical security
13.. . . . . . . . . ....
Delegations' documents
14.. . . . . . . . . ....
Safe custody of documents
15.. . . . . . . . . ....
Inspection of offices
16.. . . . . . . . . ....
Disposal of EU classified waste
17.. . . . . . . . . ....
18.. . . . . . . . . ....
SECTION X
BREACHES OF SECURITY AND COMPROMISE OF EU CLASSIFIED INFORMATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECTION XI
PROTECTION OF INFORMATION HANDLED IN INFORMATION TECHNOLOGY AND COMMUNICATION SYSTEMS
Chapter I
Introduction
GENERAL ASPECTS
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
THREATS TO, AND VULNERABILITIES OF SYSTEMS
4.. . . . . . . . . ....
5.. . . . . . . . . ....
SECURITY MEASURES
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
SYSTEM-SPECIFIC SECURITY REQUIREMENT STATEMENT (SSRS)
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
SECURITY MODES OF OPERATION
13.. . . . . . . . . ....
Chapter II
Definitions
ADDITIONAL MARKINGS
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
21.. . . . . . . . . ....
22.. . . . . . . . . ....
23.. . . . . . . . . ....
24.. . . . . . . . . ....
25.. . . . . . . . . ....
26.. . . . . . . . . ....
27.. . . . . . . . . ....
28.. . . . . . . . . ....
29.. . . . . . . . . ....
30.. . . . . . . . . ....
31.. . . . . . . . . ....
Chapter III
Security responsibilities
GENERALITIES
32.. . . . . . . . . ....
33.. . . . . . . . . ....
34.. . . . . . . . . ....
SECURITY ACCREDITATION AUTHORITY (SAA)
35.. . . . . . . . . ....
36.. . . . . . . . . ....
INFOSEC AUTHORITY (IA)
37.. . . . . . . . . ....
IT SYSTEM OPERATIONAL AUTHORITY (ITSOA)
38.. . . . . . . . . ....
39.. . . . . . . . . ....
40.. . . . . . . . . ....
USERS
41.. . . . . . . . . ....
INFOSEC TRAINING
42.. . . . . . . . . ....
Chapter IV
Non-technical security measures
PERSONNEL SECURITY
43.. . . . . . . . . ....
44.. . . . . . . . . ....
45.. . . . . . . . . ....
PHYSICAL SECURITY
46.. . . . . . . . . ....
47.. . . . . . . . . ....
CONTROL OF ACCESS TO A SYSTEM
48.. . . . . . . . . ....
49.. . . . . . . . . ....
Chapter V
Technical security measures
SECURITY OF INFORMATION
50.. . . . . . . . . ....
51.. . . . . . . . . ....
52.. . . . . . . . . ....
53.. . . . . . . . . ....
54.. . . . . . . . . ....
55.. . . . . . . . . ....
CONTROL AND ACCOUNTABILITY OF INFORMATION
56.. . . . . . . . . ....
57.. . . . . . . . . ....
58.. . . . . . . . . ....
HANDLING AND CONTROL OF REMOVABLE COMPUTER STORAGE MEDIA
59.. . . . . . . . . ....
60.. . . . . . . . . ....
DECLASSIFICATION AND DESTRUCTION OF COMPUTER STORAGE MEDIA
61.. . . . . . . . . ....
62.. . . . . . . . . ....
63.. . . . . . . . . ....
COMMUNICATIONS SECURITY
64.. . . . . . . . . ....
65.. . . . . . . . . ....
66.. . . . . . . . . ....
67.. . . . . . . . . ....
68.. . . . . . . . . ....
69.. . . . . . . . . ....
INSTALLATION AND RADIATION SECURITY
70.. . . . . . . . . ....
71.. . . . . . . . . ....
72.. . . . . . . . . ....
73.. . . . . . . . . ....
Chapter VI
Security during handling
SECURITY OPERATING PROCEDURES
74.. . . . . . . . . ....
SOFTWARE PROTECTION/CONFIGURATION MANAGEMENT
75.. . . . . . . . . ....
76.. . . . . . . . . ....
CHECKING FOR THE PRESENCE OF MALICIOUS SOFTWARE/COMPUTER VIRUSES
77.. . . . . . . . . ....
78.. . . . . . . . . ....
MAINTENANCE
79.. . . . . . . . . ....
80.. . . . . . . . . ....
Chapter VII
Procurement
81.. . . . . . . . . ....
82.. . . . . . . . . ....
ACCREDITATION
83.. . . . . . . . . ....
84.. . . . . . . . . ....
EVALUATION AND CERTIFICATION
85.. . . . . . . . . ....
86.. . . . . . . . . ....
87.. . . . . . . . . ....
88.. . . . . . . . . ....
89.. . . . . . . . . ....
ROUTINE CHECKING OF SECURITY FEATURES FOR CONTINUED ACCREDITATION
90.. . . . . . . . . ....
91.. . . . . . . . . ....
92.. . . . . . . . . ....
Chapter VIII
Temporary or occasional use
SECURITY OF MICROCOMPUTERS/PERSONAL COMPUTERS
93.. . . . . . . . . ....
94.. . . . . . . . . ....
USE OF PRIVATELY-OWNED IT EQUIPMENT FOR OFFICIAL COUNCIL WORK
95.. . . . . . . . . ....
96.. . . . . . . . . ....
USE OF THE CONTRACTOR-OWNED OR NATIONALLY-SUPPLIED IT EQUIPMENT FOR OFFICIAL...
97.. . . . . . . . . ....
SECTION XII
RELEASE OF EU CLASSIFIED INFORMATION TO THIRD STATES OR INTERNATIONAL ORGANISATIONS
PRINCIPLES REGULATING THE RELEASE OF EU CLASSIFIED INFORMATION
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
LEVELS
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
THE AGREEMENTS
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECTION XIII
COMMON MINIMUM STANDARDS ON INDUSTRIAL SECURITY
1.. . . . . . . . . ....
DEFINITIONS
2.
For the purposes of these common minimum standards, the following...
ORGANISATION
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
CLASSIFIED CONTRACTS
8.
The security classification of classified contracts must take account of...
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
18.. . . . . . . . . ....
19.. . . . . . . . . ....
20.. . . . . . . . . ....
21.. . . . . . . . . ....
22.. . . . . . . . . ....
VISITS
23.. . . . . . . . . ....
TRANSMISSION AND TRANSPORTATION OF EU CLASSIFIED INFORMATION
24.. . . . . . . . . ....
25.
The international transportation of EU classified material relating to classified...
Appendix 1
List of national security authorities
BELGIUM
BULGARIA
CZECH REPUBLIC
DENMARK
GERMANY
ESTONIA
GREECE
SPAIN
FRANCE
IRELAND
ITALY
CYPRUS
LATVIA
LITHUANIA
LUXEMBOURG
HUNGARY
MALTA
NETHERLANDS
AUSTRIA
POLAND
PORTUGAL
ROMANIA
SLOVENIA
SLOVAKIA
FINLAND
SWEDEN
UNITED KINGDOM
Appendix 2
Appendix 3
Practical classification guide
. . . . . . . . . ....
Appendix 4
Guidelines for release of EU classified information to third States or international organisations
Level 1 Cooperation
PROCEDURES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
SECURITY REGULATIONS TO BE APPLIED BY BENEFICIARIES
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
Appendix 5
Guidelines for release of EU classified information to third States or international organisations
Level 2 Cooperation
PROCEDURES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
SECURITY REGULATIONS TO BE APPLIED BY BENEFICIARIES
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
17.. . . . . . . . . ....
Appendix 6
Guidelines for release of EU classified information to third States or international organisations
Level 3 Cooperation
PROCEDURES
1.. . . . . . . . . ....
2.. . . . . . . . . ....
3.. . . . . . . . . ....
4.. . . . . . . . . ....
5.. . . . . . . . . ....
6.. . . . . . . . . ....
7.. . . . . . . . . ....
8.. . . . . . . . . ....
9.. . . . . . . . . ....
10.. . . . . . . . . ....
SECURITY REGULATIONS TO BE APPLIED BY BENEFICIARIES
11.. . . . . . . . . ....
12.. . . . . . . . . ....
13.. . . . . . . . . ....
14.. . . . . . . . . ....
15.. . . . . . . . . ....
16.. . . . . . . . . ....
Council Decision
of 19 March 2001
adopting the Council's security regulations
(2001/264/EC) (repealed)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Repealed by Council Decision of 31 March 2011 on the security rules for protecting EU classified information (2011/292/EU).