(Utkast) Kommisjonens gjennomføringsbeslutning (EU) …/… om å fastsette håndteringsreglene for uklassifiserte PRS-mottakere i henhold til artikkel 8 nr. 3 i europaparlaments- og rådsbeslutning nr. 1104/2011/EU
Sikkerhetskrav for adgang til satellittnavigasjonssystemet Galileo: fastsettelse av håndteringsreglene for uklassifiserte PRS-mottakere
Utkast til kommisjonsbeslutning godkjent av komite (representanter for medlemslandene) og publisert i EUs komitologiregister 18.11.2024
Nærmere omtale
BAKGRUNN (fra kommisjonsbeslutningen)
(1) The uptake of the Galileo Public Regulated Service (PRS) pivots on the ability of the Competent PRS Authorities (CPA) established in EU Member States, and the national PRS communities, to operate PRS receivers and to transfer them according to rules that, while ensuring compliance with the CMS, do also allow for the seamless conduct of activities and operations. In order to achieve this, the Commission aims at defining the common minimum rules for the handling of unclassified PRS (operational) receivers that are not categorized as CCIs (crypto controlled items), i.e. Unclassified non-CCIs.
(2) Pursuant to Article 8(3) of Decision No 1104/2011/EU the Commission may adopt the necessary technical requirements, guidelines and other measures on the basis of the CMS. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 12(2) of Decision No 1104/2011/EU.
(3) Pursuant to Article 2(g) of Commission Delegated Decision C(2015)6123 final a “PRS receiver” means a set of components which receives PRS signals in space and provides to authorized users one of the following outputs as a minimum: positions, velocity, time, ranges or delta ranges by processing these signals.
(4) Pursuant to Article 6(3) of Commission Delegated Decision C(2015)6123 final a CPA designated by a Member State shall ensure that each entity handling PRS items and classified PRS information established in the territory of that Member State designates within its structure a point of contact.
(5) Pursuant to Article 6(5) of Commission Delegated Decision C(2015)6123 final a Competent PRS Authority (CPA) shall inform the Galileo Security Monitoring Centre (GSMC) of breaches of security or compromise of classified information. Pursuant to Article 6(7) a CPA shall carry out its task on the basis of a regular and robust assessment of risks affecting the security and continuity of the PRS in the event of a breach of security.
(6) Pursuant to Article 9(3) of Commission Delegated Decision C(2015)6123 final a CPA shall ensure that each PRS user receives only the PRS keys and the related PRS information required for performing its duties.
(7) Pursuant to Article 10 of Commission Delegated Decision C(2015)6123 final a CPA shall ensure that operational concepts and procedures for the use of the PRS are established and applied by its PRS communities.
(8) Pursuant to Article 13(1) of Commission Delegated Decision C(2015)6123 final a CPA designated by a Member State shall ensure that an entity developing or manufacturing PRS security modules established in the territory of that Member State acts at all times in conformity with the protection profile for PRS security modules referred to in point 1.4 of Annex I of the decision.
(9) Pursuant to Article 13(3) of Commission Delegated Decision C(2015)6123 final a CPA designated by a Member State shall ensure that PRS security modules manufactured by an entity established in the territory of that Member State are evaluated and approved in accordance with points 23 to 28 of Annex IV to Council Decision of 23 September 2013 on the security rules for protecting EU classified information and the applicable national laws and regulations.
(10) The measures provided for in this Decision are in accordance with the opinion of the Programme Committee,