CHAPTER 3PHYSICAL SECURITY AIMED AT PROTECTING CLASSIFIED INFORMATION
Article 20Management of keys and combinations used for protecting EUCI
1.
Procedures for managing keys and combination settings for offices, rooms, strong rooms and security containers shall be laid down in implementing rules according to Article 60 below. Such procedures shall be intended to guard against unauthorised access.
2.
Combination settings shall be committed to memory by the smallest possible number of individuals needing to know them. Combination settings for security containers and strong rooms storing EUCI shall be changed:
(a)
on receipt of a new container;
(b)
whenever there is a change in personnel knowing the combination;
(c)
whenever a compromise has occurred or is suspected;
(d)
when a lock has undergone maintenance or repair; and
(e)
at least every 12 months.