ANNEX ISupplementary provisions
ANNEX I PERSONNEL SECURITY MEASURES 1. This Annex sets out provisions for implementing Article 7 of this decision. 2. The Registrar of the Court of Justice shall be responsible for identifying, so far as concerns him and in so far as strictly necessary, the posts necessitating access to FIDUCIA information and therefore requiring the officials or other servants occupying the posts concerned to be authorised to have access to FIDUCIA information. 3. With a view to the grant of authority to have access to FIDUCIA information, the FIDUCIA office shall send the security questionnaire, filled in by the official or other servant concerned, to the National Security Authority of the Member State of which the person concerned is a national or to any other competent national authority, identified in the rules on the protection of EUCI applicable within the EU institutions (‘the competent NSA’), and request a security investigation for a SECRET UE/EU SECRET level of classification. 4. At the end of the security investigation, acting in accordance with the laws and regulations in force in the Member State concerned, the competent NSA shall notify the FIDUCIA office of the conclusions of the investigation in question. 5. When the result of the security investigation is that the competent NSA is certain that nothing adverse is known that would call into question the loyalty, trustworthiness or reliability of the person concerned, the competent appointing authority (‘the appointing authority’) may authorise that person to have access to FIDUCIA information. 6. When the completed security investigation does not lead to the certainty referred to in paragraph 5, the appointing authority shall inform the person concerned. In such a case, the FIDUCIA office, acting on the instructions of the appointing authority, may ask the competent NSA for any further clarification it is in a position to offer in accordance with its national laws and regulations. If the outcome of the security investigation is confirmed, authorisation shall not be granted for access to FIDUCIA information. 7. Authorisation of access to FIDUCIA information shall be valid for a period of five years. It shall be withdrawn when the person concerned leaves the post necessitating access to FIDUCIA information or if the appointing authority considers that there are grounds for withdrawal of authorisation. 8. Authorisation of access to FIDUCIA information may be renewed in accordance with the procedure set out in paragraphs 3 to 5. 9. The FIDUCIA office shall keep a record of authorisations of access to FIDUCIA information. 10. If it is brought to the FIDUCIA office's knowledge that a risk to security is posed by a person holding authorisation for access to FIDUCIA information, the FIDUCIA office shall give notice of this to the competent NSA and the appointing authority may suspend access to FIDUCIA information or withdraw the authorisation of access to that information. 11. In an emergency, the appointing authority may, after consulting the competent NSA and subject to the results of preliminary checks to ascertain that no adverse information is known, grant temporary authorisation of access to FIDUCIA information to the officials and other servants concerned. Such temporary authorisation shall be valid until the end of the procedure referred to in paragraphs 3 to 5, but may not, however, exceed a period of six months from the date on which the request for a security investigation is made to the competent NSA. 12. Before being granted access to FIDUCIA information, the persons holding that authorisation shall follow a training programme in order to enable them to discharge their responsibility for handling FIDUCIA information. Authorisation of access to FIDUCIA information shall not become effective until that training has been completed and responsibility has been acknowledged in writing.