Chapter III, Section 2, Article 35 · EUROSUR

Contents

Article 35EUROSUR Security Accreditation Board#

1.A EUROSUR Security Accreditation Board (‘the Accreditation Board’) is established within the Agency.

2.As security accreditation authority, the Accreditation Board shall, with regard to security accreditation for EUROSUR, be responsible for:

(a)defining and approving a security accreditation strategy for EUROSUR including the European component;

(b)Member States shall report to the Accreditation Board regarding the accreditation of their national components, so as to ensure that the Accreditation Board can take relevant interconnection decisions;

(c)taking security accreditation decisions for the European component, taking into account the advice provided by national entities competent in security matters and the overall security risks;

(d)approving relevant documentation relating to security accreditation;

(e)advising, within its field of competence, the Agency and the Member States in the establishment of security operating procedures (‘SecOps’), and providing a statement with its concluding position;

(f)examining and approving the security risk assessment cooperating with the Agency, Member States and the Commission to define risk mitigation measures;

(g)checking the implementation of security measures in relation to the security accreditation of the European component by undertaking or sponsoring security assessments, inspections or reviews;

(h)endorsing the selection of approved products and measures and of approved cryptographic products used to provide security for the European component of EUROSUR and for interconnection;

(i)approving or, where relevant, together with the relevant entity competent in security matters, participating in the joint approval of:

(i)the interconnection of the European component with national components,

(ii)the interconnection of the external components to EUROSUR;

(j)agreeing with the relevant Member State the procedures relating to access control;

(k)on the basis of the security risk reports, informing the Agency of its risk assessment and providing advice to the Agency on residual security risk treatment options for a given security accreditation decision;

(l)carrying out the consultations which are necessary to perform its tasks.

3.In the security accreditation strategy referred to in point (a) of paragraph 2, the Accreditation Board shall set out the following:

(a)the scope of the activities necessary to perform and maintain the accreditation of the European component of EUROSUR, and their potential interconnection with other components;

(b)a security accreditation process for the European component with a degree of detail commensurate with the required level of assurance and clearly stating the approval conditions;

(c)the role of relevant stakeholders involved in the accreditation process;

(d)an accreditation schedule compliant with the deployment of the EUROSUR standards, in particular as regards the deployment of infrastructure, service provision and evolution;

(e)the principles of the security accreditation of the national components to be performed by national entities of the Member States competent in security matters;

(f)the provisions related to data security of the external components of EUROSUR.

4.The Accreditation Board shall perform its tasks independently when handling files, performing system security audits, preparing decisions and organising its meetings.

Defined terms · 16

Show every defined term

a sublayer
means a layer of information underneath the event layer, the operational layer or the risk analysis layer of a situational picture.
event
means a situation, which is likely to have an impact on the external borders either as regards migration, cross-border crime, or the protection and saving of the lives of migrants, including border incidents, or that may affect the functioning of EUROSUR, including any of its technical components;
external flight
means any flight of a manned or unmanned aircraft and its passengers and/or cargo to or from the territories of the Member States, which is not an internal flight as defined in point 3 of Article 2 of Regulation (EU) 2016/399 of the European Parliament and of the Council;
facilitation
means facilitation of unauthorised entry, transit and residence as defined in Council Directive 2002/90/EC;
indicator
means a measurement or value that refers to events or to tasks describing the situation at external borders which contributes to situational awareness and risk analysis or supports reaction capabilities;
International Coordination Centre
means the coordination structure established for the coordination of a joint operation or a rapid border intervention at the external borders;
managing a situational picture
means establishing and maintaining the situational picture and processing all the information that it contains;
Maritime Rescue Coordination Centre
means a unit responsible for promoting efficient organisation of search and rescue services and for coordinating the conduct of search and rescue operations within a search and rescue region as referred to in the International Convention on Maritime Search and Rescue;
operational status
means the ability of an asset, unit, system or centre to perform its operational function(s) characterised as ‘fully operational’, ‘limited operational functions’, or ‘not available’;
owner
means the entity, agency or body managing the situational picture and the corresponding reports;
processing
means any action performed on the data and metadata and information contained in a report, whether those actions are automated or not, including collecting, recording, organising, structuring, storing, modifying, consulting, using, transmitting, publishing, combining, erasing, downgrading and destroying this data and metadata;
refusal of entry
means a refusal of entry issued to a third-country national at external borders, in accordance with Article 14 of Regulation (EU) 2016/399, for not fulfilling all the entry conditions laid down in Article 6(1) while not belonging to the categories of persons referred to in Article 6(5) of that Regulation, and to whom a standard refusal form has been issued in accordance with Annex V of the Schengen Borders Code;
security accreditation
means the formal authorisation and approval granted to a system or network of EUROSUR by the relevant Security Accreditation Authority (SAA) to process EUROSUR data in its operational environment, following the formal validation of a Security Plan and its correct implementation;
the technical components
means the systems and networks used for the purpose of EUROSUR, including the infrastructure, organisation, personnel and information resources needed to support it;
trafficking in human beings
means an offence referred to in Article 2 of Directive 2011/36/EU of the European Parliament and of the Council;
watchlist
means a list of suspicious entities, assets, behaviours or profiles established on the basis of risk analysis, with a view to orient the detection and risk analysis capabilities of the European Border and Coast Guard and trigger appropriate reaction capabilities;