ESS Security and Secure exchange of information Expert Group (E4SEG) Item 1 of the agenda IT security assurance DIME/ITDG SG Meeting London 15/2/20189 Pascal Jacques ESTAT A1 Local Informatics Security Officer

Certification process 2017-2018 Grants Workshops Next phase

Certification status 2017 2018 NL: endorsed by May'18 ESSC IT: under finalisation 2018 SI: 28-29/05/18 Endorsed Feb'19 ESSC BE (NBB): 10-11/07/18 NBB feedback under eval SE : 1-2/10/18 Endorsed Feb'19 ESSC EUROSTAT: 8-12/10/18 Endorsed Feb'19 ESSC LT: 9-10/10/18 Follow-up end March 19 EE: 30-31/10/18 Follow-up end March 19 DE: 29-30/11/18 Follow-up end June 19

Planning certification 2019 All countries confirmed planification apart UK (NSI + Customs) FR Customs ES Customs All ESS partners to be covered by end September Final report to February 2020 ESSC

2016 Grants – 1.27M€ funding country Start date end date amount duration DE 06/03/2017 05/03/2018 44,150.08 12 95% GR 01/03/2017 30/01/2018 80,957.97 10 HR 22/02/2017 21/02/2018 164,260.85 IT 23/02/2107 22/02/2018 136,266.31 LU 15/12/2016 14/12/2017 138,879.06 LV 01/11/2017 66,168.20 8 NL 01/01/2017 31/12/2017 254,396.13 PL 20/03/2017 19/03/2018 100,783.00 SI 01/04/2017 31/03/2018 129,702.48 SK 03/03/2017 02/03/2018 150,588.00

2017 Grants – 1.4M€ funding country Start date end date amount duration AT 01/09/2017 31/8/2018 60,644.96 12 95% BG 01/10/2017 30/09/2018 121,553.32 CY 21/12/2017 20/12/2018 74,053.91 DK 15/12/2017 14/12/2018 67,500.00 70% EE 01/11/2017 29,059.49 11 HR 163,191.25 HU 01/02/2018 31/01/2019 206,980.87 LT 78,532.82 LU 01/01/2018 31/12/2018 176,896.37 MT 18/12/2017 17/12/2018 126,764.02 PL 27/12/2017 26/12/2018 102,358.33 PT 20/12/2017 19/12/2018 191,272.96

2018 Grants – 1.18M€ funding country Start date end date amount duration AT 01/12/2018 30/11/2019 64,488.65 12 95% BG 01/01/2019 31/12/2019 133,657.22 FI 26/11/2018 25/11/2019 130,491.51 86.9% HR 122,238.62 HU 01/02/2019 31/01/2020 100,916.32 LU 196,604.41 MT 01/10/2018 140,765.20 15 PL 31/07/2019 66,671.56 10 RO 114,315.45 SK 30/06/2019 114,752.09 7

2019 Grants March2019 – Launch of 4th Call for proposals for mono-beneficiary grants Grants to start Q3 2019 1.2M€ funding budget

Workshops Conclusions 1st workshop on Information Classification – 5-6 October 2017 Madrid Harmonise practices in terms of data classification and controls Comparisons of the different classification schemes in the MS guidelines for data classification and lookup tables for existing classifications Conclusions Availability of comparison table between classifications schemes used in the ESS members Classification of all datasets sent by MS to ESTAT and harmonisation of protection measures

2nd workshop on security incident management and putting in place a structure for exchanging within the ESS security incidents May 2018 Barcelona Define and identify important types of incidents relevant for the microdata exchange Define exchange channels for information regarding any incident compromising the security Conclusions List of "security incidents" to be exchanged in the ESS including actions and response time Email mechanisms for rapid exchanging of information between partners

3rd workshop Impact on GDPR on the ESS exchange of microdata Spain – beginning October 2019 European Data Supervisor + some DPOs Focus on security consequences

Next Phase Launch call for tender for: Analysis of current exercise and certification results Gather opinion and feedback of some certified ESS members Propose recommendations and models for the process beyond 2019 Discuss the identified models with ESS members (ITDG, ESS IT Security Task Force) and propose options with roadmaps Deadline for completion of the analysis: end 2019 Presentation of the suggested option - post-2019 to February 2020 ESSC for endorsement

Thank You