ANNEX IISupplementary provisions
ANNEX II Accreditation criteria for coordinating bodies referred to in Article 2(3) as regards the compilation of the Annual Performance Report 1. INFORMATION AND COMMUNICATION (A) Communication The coordinating body shall adopt the necessary procedures to ensure that every change in the Union’s regulations are recorded and the instructions and databases updated in good time. (B) Information systems security The information systems security shall be certified in accordance with International Standards Organisation 27001: Information Security management systems – Requirements (ISO). Member States may certify, provided it is authorised by the Commission, the information systems security in accordance with other accepted standards if those standards guarantee a level of security at least equivalent to that provided by ISO 27001. When a paying agency acts as a coordinating body, its certification fulfils this condition.