My bookmarksSign up free

Commission Decision (EU, Euratom) 2018/559 of 6 April 2018… CHAPTER 4 — MISCELLANEOUS AND FINAL PROVISIONS

Article 9–Article 11 · 3 articles

Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗

Transparency

Article 9

This Decision shall be brought to the attention of Commission staff and to all individuals to whom it applies, and published in the Official Journal of the European Union .

Standards

Article 10

1.   The provisions of this Decision shall, where necessary, be further detailed in standards and/or guidelines to be adopted in line with Decision (EU, Euratom) 2017/46 and with Decision C(2017) 7428. IT security standards and guidelines shall provide further details on these implementing rules and Decision (EU, Euratom) 2017/46 for specific security domains according to ISO 27001:2013 Annex A. These standards and guidelines are based on industry best practices and are selected to suit the Commission's IT environment. 2.   Standards shall, where necessary, be developed according to ISO 27001:2013 Annex A in the following domains: (1) organisation of information security; (2) human resources security; (3) asset management; (4) access control; (5) cryptography; (6) physical and environmental security; (7) operational security; (8) communications security; (9) system acquisition, development and maintenance; (10) supplier relationships; (11) information security incident management; (12) information security aspects of business continuity management; (13) compliance. 3.   The ISSB shall approve the standards mentioned under paragraph 1 and 2 of this Article before their adoption. 4.   The implementing rules to Decision C(2006) 3602 related to the scope of this Decision are hereby repealed. 5.   The standards and guidelines adopted under Decision C(2006) 3602 of 16 August 2006 shall remain in effect, insofar as they do not conflict with these implementing rules, until they are repealed or replaced by standards or guidelines to be adopted under Article 13 of Decision (EU, Euratom) 2017/46.

Entry into force

Article 11

This Decision shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union .

Back to Commission Decision (EU, Euratom) 2018/559 of 6 April 2018… — full text

Articles on this page are reproduced verbatim from official open data. See the attribution line.

Source: EUR-Lex (Publications Office of the EU), © European Union, reuse permitted under Commission Decision 2011/833/EU.

What to look at next