CHAPTER 1BASIC PRINCIPLES AND MINIMUM STANDARDS
Article 7Implementation of this Decision
1.
Where necessary, implementing rules to supplement or support this Decision shall be adopted in accordance with Article 60 below.
2.
The Commission departments shall take all necessary measures falling under their responsibility in order to ensure that, when handling or storing EUCI or any other classified information, this Decision and the relevant implementing rules are applied.
3.
The security measures taken in implementation of this Decision shall be compliant with the principles for security in the Commission laid down in Article 3 of Decision (EU, Euratom) 2015/443.
4.
The Director-General for Human Resources and Security shall set up the Commission Security Authority within the Directorate-General for Human Resources and Security. The Commission Security Authority shall have the responsibilities assigned to it by this Decision and its implementing rules.
5.
Within each Commission department, the Local Security Officer (LSO), as referred to in Article 20 of Decision (EU, Euratom) 2015/443, shall have the following overall responsibilities for protecting EUCI in accordance with this Decision, in close cooperation with the Directorate-General for Human Resources and Security:
(a)
managing requests for security authorisations for staff;
(b)
contributing to security training and awareness briefings;
(c)
supervising the department's Registry Control Officer (RCO);
(d)
reporting on breaches of security and compromise of EUCI;
(e)
holding spare keys and a written record of each combination setting;
(f)
assuming other tasks related to the protection of EUCI or defined by implementing rules.