Common use of Standard security requirements Clause in Contracts

Standard security requirements. The standard security and safety requirements are rather pertaining to elements to be present in the implementation of the Plan, not to minimum security standards: • Both the host Member State on one side and EASO on the other shall appoint a single point of contact responsible for security matters under the Plan both at central and local level (hereafter ‘security responsible’). • The host Member State shall ensure that the working conditions for the performance of the activities under the Plan are compliant with the national occupational health and safety norms and regulations. • A pre-deployment briefing programme, drafted in close cooperation with the respective national authorities, focusing both on general security rules and awareness, as well as on specific security aspects for each deployment will be provided. With regards to the decentralised nature of deployments, the use of e-learning and other distance-based training techniques should be considered. • Emergency (evacuation) plan. Certain operational activities, such as operations in field locations, require that staff shall have clear guidance and training on how to evacuate quickly in case of emergencies. In a more general context, there could be a need to evacuate from the operational area as well. Emergency plans shall be drafted and maintained up-to-date by the competent authority/person(s), whereas they shall be made available to the concerned parties and exercised regularly. A security responsible shall maintain updated information on the availability of evacuation plans and routes. • Communication tools. As considered relevant by the EASO Security sector, EASO operational staff shall have access to independent radio communication equipment. If possible, the equipment shall be interoperable with the local law enforcement in charge of the security of the operation. 25 Decision of the Executive Director No 61 of 12 April 2021 on the Security Governance Framework. • Security of information. Sensitive non-classified and classified information shall be protected adequately, in accordance with the applicable legal framework26. XXXX’s security responsible shall be involved in supporting the proper classification of relevant information. • Security of IT and communication equipment. EASO IT equipment is adequately prepared to protect the information level it has been foreseen to process. • Personal security behavior shall be included in the pre-deployment training, led by operational teams and performed for the experts during the first days of arrival to the operational area. This may refer to the EASO Code of Conduct as well. • Reporting security incidents from the operational area to the EASO HQ is essential to ensure an overview of the overall security management is maintained.

Standard security requirements. The standard security and safety requirements are rather pertaining to elements to be present in the implementation of the Plan, not to minimum security standards: • Both the host Member State on one side and EASO on the other shall appoint a single point of contact responsible for security matters under the Plan both at central and local level (hereafter ‘security responsible’). • The host Member State shall ensure that the working conditions for the performance of the activities under the Plan are compliant with the national occupational health and safety norms and regulations. • A pre-deployment briefing programme, drafted in close cooperation with the respective national authorities, focusing both on general security rules and awareness, as well as on specific security aspects for each deployment will be provided. With regards to the 27 Decision of the Executive Director No 61 of 12 April 2021 on the Security Governance Framework. decentralised nature of deployments, the use of e-learning and other distance-based training techniques should be considered. • Emergency (evacuation) plan. Certain operational activities, such as operations in field locations, require that staff shall have clear guidance and training on how to evacuate quickly in case of emergencies. In a more general context, there could be a need to evacuate from the operational area as well. Emergency plans shall be drafted and maintained up-to-date by the competent authority/person(s), whereas they shall be made available to the concerned parties and exercised regularly. A security responsible shall maintain updated information on the availability of evacuation plans and routes. • Communication tools. As considered relevant by the EASO Security sector, EASO operational staff shall have access to independent radio communication equipment. If possible, the equipment shall be interoperable with the local law enforcement in charge of the security of the operation. 25 Decision of the Executive Director No 61 of 12 April 2021 on the Security Governance Framework. • Security of information. Sensitive non-classified and classified information shall be protected adequately, in accordance with the applicable legal framework26framework28. XXXX’s security responsible shall be involved in supporting the proper classification of relevant information. • Security of IT and communication equipment. EASO IT equipment is adequately prepared to protect the information level it has been foreseen to process. • Personal security behavior behaviour shall be included in the pre-deployment training, led by operational teams and performed for the experts during the first days of arrival to the operational area. This may refer to the EASO Code of Conduct as well. • Reporting security incidents from the operational area to the EASO HQ is essential to ensure an overview of the overall security management is maintained.

Standard security requirements. The standard security and safety requirements are rather pertaining to elements to be present in the implementation of the Plan, not to minimum security standards: • Both the host Member State on one side and EASO on the other shall appoint a single point of contact responsible for security matters under the Plan both at central and local level (hereafter ‘security responsible’). • The host Member State shall ensure that the working conditions for the performance of the activities under the Plan are compliant with the national occupational health and safety norms and regulations. • A pre-deployment briefing programme, drafted in close cooperation with the respective national authorities, focusing both on general security rules and awareness, as well as on specific security aspects for each deployment will be provided. With regards to the 21 Article 93 of Management Board Decision No 54 of 14 August 2019 on the EASO Financial Regulation (as amended by Management Board Decision No 74 of 28 July 2021). The MB Decision nr 54 of 14 August 2019 remains in force despite EASO being replaced by the EUAA. Any references in the EASO Financial Regulation to ‘EASO’ or the ‘EASO Regulation’, should therefore be construed as references to the ‘EUAA’ or equivalent provisions in the ‘EUAA Regulation’, respectively. 22 Decision of the Executive Director No 61 of 12 April 2021 on the Security Governance Framework. decentralised nature of deployments, the use of e-learning and other distance-based training techniques should be considered. • Emergency (evacuation) plan. Certain operational activities, such as operations in field locations, require that staff shall have clear guidance and training on how to evacuate quickly in case of emergencies. In a more general context, there could be a need to evacuate from the operational area as well. Emergency plans shall be drafted and maintained up-to-date by the competent authority/person(s), whereas they shall be made available to the concerned parties and exercised regularly. A security responsible shall maintain updated information on the availability of evacuation plans and routes. • Communication tools. As considered relevant by the EASO Security sector, EASO operational staff shall have access to independent radio communication equipment. If possible, the equipment shall be interoperable with the local law enforcement in charge of the security of the operation. 25 Decision of the Executive Director No 61 of 12 April 2021 on the Security Governance Framework. • Security of information. Sensitive non-classified and classified information shall be protected adequately, in accordance with the applicable legal framework26framework23. XXXX’s security responsible shall be involved in supporting the proper classification of relevant information. • Security of IT and communication equipment. EASO IT equipment is adequately prepared to protect the information level it has been foreseen to process. • Personal security behavior shall be included in the pre-deployment training, led by operational teams and performed for the experts during the first days of arrival to the operational area. This may refer to the EASO Code of Conduct as well. • Reporting security incidents from the operational area to the EASO HQ is essential to ensure an overview of the overall security management is maintained.

Standard security requirements. The standard security and safety requirements are rather pertaining to elements to be present in the implementation of the Plan, not to minimum security standards: • Both the host Member State on one side and EASO on the other shall appoint a single point of contact responsible for security matters under the Plan both at central and local level (hereafter ‘security responsible’). • The host Member State shall ensure that the working conditions for the performance of the activities under the Plan are compliant with the national occupational health and safety norms and regulations. • A pre-deployment briefing programme, drafted in close cooperation with the respective national authorities, focusing both on general security rules and awareness, as well as on specific security aspects for each deployment will be provided. With regards to the decentralised nature of deployments, the use of e-learning and other distance-based training techniques should be considered. • Emergency (evacuation) plan. Certain operational activities, such as operations in field locations, require that staff shall have clear guidance and training on how to evacuate quickly in case of emergencies. In a more general context, there could be a need to evacuate from the operational area as well. Emergency plans shall be drafted and maintained up-to-date by the competent authority/person(s), whereas they shall be made available to the concerned parties and exercised regularly. A security responsible shall maintain updated information on the availability of evacuation plans and routes. • Communication tools. As considered relevant by the EASO Security sector, EASO operational staff shall have access to independent radio communication equipment. If possible, the equipment shall be interoperable with the local law enforcement in charge of the security of the operation. 25 Decision of the Executive Director No 61 of 12 April 2021 on the Security Governance Framework. • Security of information. Sensitive non-classified and classified information shall be protected adequately, in accordance with the applicable legal framework26framework23. XXXX’s security responsible shall be involved in supporting the proper classification of relevant information. • Security of IT and communication equipment. EASO IT equipment is adequately prepared to protect the information level it has been foreseen to process. • Personal security behavior shall be included in the pre-deployment training, led by operational teams and performed for the experts during the first days of arrival to the operational area. This may refer to the EASO Code of Conduct as well. • Reporting security incidents from the operational area to the EASO HQ is essential to ensure an overview 22 Decision of the overall security management is maintainedExecutive Director No 61 of 12 April 2021 on the Security Governance Framework.