Article 18–Article 22 · 5 articles
Compiled from an official source version. Later amendments or repeals may not be reflected; the official text prevails. · Read the official text ↗
Appointment of the RCO
1. The RCO and deputy RCOs shall be officials or temporary agents.
2. All RCOs and deputy RCOs shall hold a valid security authorisation to access EUCI up to the level of SECRET UE/EU SECRET, and up to the level of TRES SECRET UE/EU TOP SECRET where necessary. The RCO or deputy RCO shall obtain the security authorisation before their appointment.
3. Commission Representations may request the CSA to grant an exception to the requirements set out in paragraphs 1 and 2.
Responsibilities
1. RCOs shall register information classified as CONFIDENTIEL UE/EU CONFIDENTIAL or above for security purposes when:
(a)
it arrives in or leaves a Commission department; or
(b)
it arrives in or leaves a CIS.
2. RCOs shall register all events in the lifecycle of all information classified as CONFIDENTIEL UE/EU CONFIDENTIAL or above. RCOs shall also ensure that a record is kept of all information classified as RESTREINT UE/EU RESTRICTED or its equivalent that is exchanged with third countries and international organisations. This shall be done in coordination with the EUCI registry managed by the Secretariat-General.
3. The RCO shall register documents classified CONFIDENTIEL UE/EU CONFIDENTIAL or above in the classified document register and ensure that they are stored securely inside the EUCI registry.
4. The RCO shall assist Commission staff in creating and sending information classified CONFIDENTIEL UE/EU CONFIDENTIAL or higher.
5. When documents classified as CONFIDENTIEL UE/EU CONFIDENTIAL or higher are received from other departments or external parties, the RCO shall ensure that the delivery receipt is duly returned to the originator.
6. Before allowing a member of staff to access a classified document held by the EUCI registry, the RCO shall verify with the LSO that the staff member is security-authorised by the CSA.
7. The RCO shall log all personnel entering and exiting the EUCI registry who are not authorised to have unescorted access and accompany them for the duration of their visit.
8. When a member of staff takes a document for consultation outside the EUCI registry, the RCO shall ensure that he or she is aware of the relevant compensatory security measures and that the member of staff returns the document as soon as it is no longer needed. The RCO shall remind staff to return any such document as soon as possible.
9. The EUCI registry shall issue a courier certificate if classified documents are hand-carried outside the country in which the registry is located.
10. Detailed instructions for RCOs on registering classified documents shall be set out in a security notice.
Downgrading and declassifying
The RCO shall assist the originating departments in the process of reviewing registered EUCI to ascertain whether the original classification level is still appropriate, or whether the document can be downgraded or declassified.
Destruction
1. RCOs shall be responsible for destroying information classified as CONFIDENTIEL UE/EU CONFIDENTIAL and above by approved means, where appropriate in the presence of security-cleared witnesses.
2. RCOs shall record any destruction of information classified as CONFIDENTIEL UE/EU CONFIDENTIAL and above in the classified document register and keep the corresponding destruction certificates in the EUCI registry.
Additional tasks
1. The RCO shall provide all necessary assistance to the LSO when the LSO performs supervisory activities in the EUCI registry.
2. The RCO shall report any suspected or actual security incidents to the LSO, who shall in turn report them to the CSA.
3. The RCO of the EUCI registry of a Commission department organising a classified meeting at the level CONFIDENTIEL UE/EU CONFIDENTIAL or higher shall prepare the EUCI that will be handled during the meeting and shall coordinate with the meeting organiser to ensure that all documents and receipts are handled in line with the relevant rules.
Source: EUR-Lex (Publications Office of the EU), © European Union, reuse permitted under Commission Decision 2011/833/EU.
