Definitions
Article 1
Open ↗For the purposes of this Decision the following definitions apply: (1) ‘assets’ means all movable and immovable property and possessions of the Commission; (2) ‘Commission department’ means a Commission Directorate-General or service, or a Cabinet of a Member of the Commission; (3) ‘Communication and Information System’ or ‘CIS’ means any system enabling the handling of information in electronic form, including all assets required for its operation, as well as the infrastructure, organisation, personnel and information resources; (4) ‘Control of risks’ shall mean any security measure that can reasonably be expected to effectively control a risk to security by its prevention, mitigation, avoidance or transfer; (5) ‘crisis situation’ means a circumstance, event, incident or emergency (or a succession or combination thereof) posing a major or an immediate threat to security in the Commission regardless of its origin; (6) ‘data’ means information in a form that allows it to be communicated, recorded or processed; (7) ‘Member of the Commission responsible for security’ means a Member of the Commission under whose authority the Directorate-General for Human Resources and Security falls; (8) ‘personal data’ means personal data as defined in Article 2(a) of Regulation (EC) No 45/2001 of the European Parliament and of the Council ( 4 ) ; (9) ‘premises’ shall mean any immovable or assimilated property and possessions of the Commission; (10) ‘Prevention of risk’ shall mean security measures that can reasonably be expected to impede, delay or stop a risk to security; (11) ‘risk to security’ means the combination of the threat level, the level of vulnerability and the possible impact of an event; (12) ‘security in the Commission’ means the security of persons, assets and information in the Commission, and in particular the physical integrity of persons and assets, the integrity, confidentiality and availability of information and communication and information systems, as well as the unobstructed functioning of Commission operations; (13) ‘security measure’ means any measure taken in accordance with this Decision for purposes of controlling risks to security; (14) ‘Staff Regulations’ means the Staff Regulations of officials of the European Union, as laid down by Regulation (EEC, Euratom, ECSC) No 259/68 of the Council ( 5 ) and its amending acts; (15) ‘threat to security’ means an event or agent that can reasonably be expected to adversely affect security if not responded to and controlled; (16) ‘immediate threat to security’ means a threat to security which occurs with no or with extremely short advance warning; and (17) ‘major threat to security’ means a threat to security that can reasonably be expected to lead to loss of life, serious injury or harm, significant damage to property, compromise of highly sensitive information, disruption of IT systems or of essential operational capacities of the Commission; (18) ‘vulnerability’ means a weakness of any nature that can reasonably be expected to adversely affect security in the Commission, if exploited by one or more threats.