Persons who have been authorised to have access to FIDUCIA information and persons deemed to be so authorised may gain access to the FIDUCIA office premises in order to consult FIDUCIA information on the conditions laid down in Article 7(1) and (2) of this decision.
10.
The security authority may in exceptional cases issue access authorisation to persons without FIDUCIA authorisation if it is essential that they should enter the FIDUCIA office premises, provided that access to those premises does not involve access to FIDUCIA information which is to remain protected from sight in security containers. Those persons may gain access only if they are accompanied, and continuously watched, by a member of the FIDUCIA office with authorisation for access to FIDUCIA information.
11.
All access to FIDUCIA office premises shall be recorded in an access logbook. This logbook shall be kept at a work station in those premises. The communication and information system used for this purpose shall be compatible with the security requirements laid down in Article 10 of, and Annex IV to, this decision.
12.
The protection measures governing the written use of FIDUCIA information shall apply in the case of oral use of that information.
III. CONTROL OF KEYS AND COMBINATIONS USED TO PROTECT FIDUCIA INFORMATION
13.
The security authority shall define procedures for managing keys and combination settings for the FIDUCIA office premises and security containers. Such procedures shall protect against unauthorised access.
14.
Combination settings shall be committed to memory by the smallest possible number of persons needing to know them. Combination settings for security containers storing FIDUCIA information shall be changed;
(a) on receipt of a new container;
(b) when there is a change in personnel knowing the combination;
(c) when compromise has occurred or is suspected;
(d) when a lock has undergone maintenance or repair;
(e) at least every 12 months.
15.
Technical equipment intended for the physical protection of FIDUCIA information shall comply with the rules on the protection of EUCI applicable within the EU institutions. The security authority shall be responsible for the observance of these rules.
16.
Technical equipment shall be periodically inspected and maintained at regular intervals. Maintenance shall take account of the inspection results in order that the best possible operation of the equipment may be guaranteed.
17.
At every inspection the efficiency of the various security measures and of the security system as a whole is to be reappraised.
ANNEX III
MANAGEMENT OF FIDUCIA INFORMATION
I. INTRODUCTION
1.
This Annex sets out provisions for implementing Article 9 of the decision. It lays down the administrative measures designed to protect FIDUCIA information throughout the proceedings before the Court of Justice, and to control it in order to help deter and detect deliberate or accidental compromise or loss of such information.
II. REGISTER OF FIDUCIA INFORMATION
2.
A register of FIDUCIA information shall be created. This register shall be kept, by the FIDUCIA office, at a work station situated in the FIDUCIA office premises. The communication and information system used to keep this register shall be compatible with the security requirements laid down in Article 10 of, and Annex IV to, this decision.
III. REGISTRATION OF FIDUCIA INFORMATION
3.
Feedback