Commission Decision (EU) 2022/640

Contents

THE EUROPEAN COMMISSION,Having regard to the Treaty on the Functioning of the European Union, and in particular Article 249 thereof,Having regard to Commission Decision (EU, Euratom) 2015/443 of 13 March 2015 on Security in the Commission,^noteHaving regard to Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security rules for protecting EU classified information^note,Whereas:

(1)Decisions (EU, Euratom) 2015/443 and (EU, Euratom) 2015/444 apply to all Commission departments and premises of the Commission.

(2)Where necessary, implementing rules to supplement or support Decision (EU, Euratom) 2015/444 are to be adopted in accordance with Article 60 thereof.

(3)Security measures for protecting EU classified information throughout its life-cycle should be commensurate in particular with its security classification.

(4)Security measures for protecting communication and information systems in the Commission are laid down in Commission Decision (EU, Euratom) 2017/46^note, in particular Article 3 on Principles for IT security in the Commission and Article 9 on System owners.

(5)The objective of implementing rules on the roles and responsibilities of the principal security actors is to provide guidance on the prerequisites and duties that are laid down for those roles in Decisions (EU, Euratom) 2015/443 and (EU, Euratom) 2015/444.

(6)Article 36(7) of Decision (EU, Euratom) 2015/444 lays down a number of additional security-related functions to be assumed by the Commission Security Authority. The tasks related to these functions are laid down in this Decision.

(7)Local Security Officers and Registry Control Officers have specific responsibilities for the protection of EU classified information in their departments according to Decision (EU, Euratom) 2015/444.

(8)On 4 May 2016, the Commission adopted a decision^note empowering the Member of the Commission responsible for security matters to adopt, on behalf of the Commission and under its responsibility, the implementing rules provided for in Article 60 of Decision (EU, Euratom) 2015/444; subsequently on 13 April 2021, the Member of the Commission responsible for security matters adopted, on behalf of the Commission and under its responsibility, a decision^note subdelegating these implementing rules to the Director-General of the Directorate-General for Human Resources and Security,

HAS ADOPTED THIS DECISION: