CHAPTER 3

PHYSICAL SECURITY AIMED AT PROTECTING CLASSIFIED INFORMATION

Physical protective measures for handling and storing EUCI
Article 19
1
EUCI which is classified RESTREINT UE/EU RESTRICTED may be handled:
a
in a Secured Area,
b
in an Administrative Area provided the EUCI is protected from access by unauthorised individuals, or
c
outside a Secured Area or an Administrative Area provided the holder carries the EUCI in accordance with Article 31 and has undertaken to comply with compensatory measures, set out in implementing measures, to ensure that EUCI is protected from access by unauthorised persons.
2
EUCI which is classified RESTREINT UE/EU RESTRICTED shall be stored in suitable locked office furniture in an Administrative Area or a Secured Area. It may temporarily be stored outside an Administrative Area or a Secured Area provided the holder has undertaken to comply with compensatory measures laid down in implementing rules.
3
EUCI which is classified CONFIDENTIEL UE/EU CONFIDENTIAL or SECRET UE/EU SECRET may be handled:
a
in a Secured Area;
b
in an Administrative Area provided the EUCI is protected from access by unauthorised individuals; or
c
outside a Secured Area or an Administrative Area provided the holder:
1. has undertaken to comply with compensatory measures, set out in implementing rules, to ensure the EUCI is protected from access by unauthorised persons;
2. keeps the EUCI at all times under his personal control; and
3. in the case of documents in paper form, has notified the relevant registry of the fact.
4
EUCI which is classified CONFIDENTIEL UE/EU CONFIDENTIAL and SECRET UE/EU SECRET shall be stored in a Secured Area in a security container or a strong room.
5
EUCI which is classified TRES SECRET UE/EU TOP SECRET shall be handled in a Secured Area, set up and maintained by the Commission Security Authority, and accredited to that level by the Commission Security Accreditation Authority.
6
EUCI which is classified TRES SECRET UE/EU TOP SECRET shall be stored in a Secured Area, accredited to that level by the Commission Security Accreditation Authority, under one of the following conditions:
a
in a security container in accordance with the provisions of Article 18 with one or more of the following supplementary controls:
1. continuous protection or verification by cleared security staff or duty personnel;
2. an approved IDS in combination with security response personnel;
or
b
in an IDS-equipped strong room in combination with security response personnel.