ANNEX IV.VI.B- SAL for Lot N. 2 - European GNSS Agency - Europa

More documents

Recommendations

Info

ANNEX IV.VI.B to Draft Framework ContractGSA/OP/04/2012Without Appendix X and X to Annex X to the contract XXX – NOT CLASSIFIED.- [REQ 32] Unless otherwise agreed in writing, the tool ‘Chiasmus for Windows’ developed bythe BSI shall be used for encryption- [REQ 33] The Contractor shall ensure they are licensed by the BSI to use the tool.BSI’s details:Bundesamt für Sicherheit in der Informationstechnik (BSI)Refereat Z5 / VertriebPostfach 20 03 6353133 BonnGERMANYPhone: +49 228 9582 281 or 212Fax: +49 228 9582 4430E-mail: vertrieb@bsi.bund.de- [REQ 34] All parties involved in contractual activities shall handle the encryption tool andthe generated encrypted documents in accordance with the Security Operating Procedures(SecOPS) of the Authority providing the encryption tool or, provided they are not less stringent, inaccordance with national regulations.4.8 Transportation plans- [REQ 35] In addition to the requirements of AD 2, The European GNSS PSI and AD 3,Galileo COMSEC Security Instructions regarding transportation, the Contractor shall submit atransportation plan for any shipment of CCI and/or CRYPTO information or material even when theshipment occurs only within one country.- [REQ 36] In addition to the submission of the transportation plan to the appropriate NSA’sor DSA’s, the Contractor shall send at the same time a copy of the plan to the GSA for information.- [REQ 37] For shipments within one country, the submission of the transportation plan to theNSA/DSA shall be in accordance with national rules but, in any case, a plan shall be establishedand sent to the GSA at least 48 hours prior to the shipment.- [REQ 38] Transportation plans within the framework of this contract are considered sensitiveand shall be encrypted when sent by e-mail or transmitted on a digital media. They shall beclassified as appropriate.4.9 Security violations- [REQ 39] Security violations shall be handled as prescribed in in AD 2, The European GNSSPSI.- [REQ 40] Reports of security violations shall be sent to the GSA too.- [REQ 41] Reports of security violations shall be classified as appropriate and transmittedaccordingly. Should the classification of the report be higher than RESTREINT UE (or equivalent), asanitized report allowing a classification at the level RESTREINT UE of lower shall be established inorder to allow a quick transmission of it using appropriate channels and tools.Page 8 of 12GSAContractorWithout Appendix X and X to Annex X to the contract XXXX – NOT CLASSIFIED.European GNSS Agency. Rue de la Loi, 56, B-1049 Brussels, Belgium. Telephone: (32-2) 297.70.76,Fax: (32-2) 292.08.72. Email:lso@gsa.europa.eu (Local Security Officer)Website: http://www.gsa.europa.eu
ANNEX IV.VI.B to Draft Framework ContractGSA/OP/04/2012Without Appendix X and X to Annex X to the contract XXX – NOT CLASSIFIED.5 Security-related notices or communicationAny security-related notices or communication to the GSA shall be addressed to"European GNSS Agency (GSA),Security Department for the attention of the Local Security Officer,Rue de la Loi 56,B-1049 BrusselsBelgiume-mail: lso@gsa.europa.eu,fax-mail: fax-security@gsa.europa.eu,fax phone number: +32 2 292 08 72.Telephone: +32 2 29 740766 Applicable documentsAD 1 Regulation (EU) No 912/2010 of the European Parliament and of the Council of 22September 2010 setting up the European GNSS Agency, repealing Council Regulation (EC)No 1321/2004 on the establishment of structures for the management of the Europeansatellite radio navigation programmes and amending Regulation (EC) No 683/2008 of theEuropean Parliament and of the Council (OJ L 276, 20.10, p 11)AD 2AD 3AD 4AD 5The European GNSS PSI issued by the GNSS Security Board (GNSS SB); current version:Issue 2.0 Rev 1 dated 21.02.2011Galileo COMSEC Security Instructions issue 3.0, 28 June 2007 (RESTRICTED) (currentlyunder review)Galileo Stand alone Security Classification guide v2.1, 12 June 2008 (RESTREINT UE)Decision No 1104/2011/EU of the European Parliament and of the Council of 25 October2011 on the rules for access to the Public Regulated Service provided by the GlobalNavigation Satellite System established under the Galileo programme (OJ L 287,4.11.2011)7 Reference documentsRD 1Commission Decision 2001/844/EC, ECSC, Euratom published in OJ L 317 of 3.12.2001 aslast amended by Commission Decision 2006/548/EC, Euratom published in OJ L 215 p.38of 5.8.2006, amending its internal Rules of Procedure (COMMISSION PROVISIONS ONSECURITY)Amendments to Commission Decision 2001/844/EC, ECSC, EuratomCommission Decision 2005/94/EC, Euratom, of 3 February 2005 published in OJ L 31 of4.2.2005 amending Decision 2001/844/EC, ECSC, EuratomCommission Decision 2006/70/EC, Euratom, of 31 January 2006 published in OJ L 34 of7.2.2006 amending Decision 2001/844/EC, ECSC, EuratomPage 9 of 12GSAContractorWithout Appendix X and X to Annex X to the contract XXXX – NOT CLASSIFIED.European GNSS Agency. Rue de la Loi, 56, B-1049 Brussels, Belgium. Telephone: (32-2) 297.70.76,Fax: (32-2) 292.08.72. Email:lso@gsa.europa.eu (Local Security Officer)Website: http://www.gsa.europa.eu
Page 1 and 2: ANNEX IV.VI.B to Draft Framework Co
Page 7: ANNEX IV.VI.B to Draft Framework Co

ANNEX IV.VI.B- SAL for Lot N. 2 - European GNSS Agency - Europa

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?