1. ESS Security and Secure exchange of information Expert Group (E4SEG) Item 1 of the agenda IT security assurance DIME/ITDG SG Meeting London 15/2/20189
Pascal Jacques ESTAT A1 Local Informatics Security Officer

2. Certification process 2017-2018
Grants
Workshops
Next phase

3. Certification status 2017 2018 NL: endorsed by May'18 ESSC
IT: under finalisation
2018
SI: 28-29/05/18 Endorsed Feb'19 ESSC
BE (NBB): 10-11/07/18 NBB feedback under eval
SE : 1-2/10/18 Endorsed Feb'19 ESSC
EUROSTAT: 8-12/10/18 Endorsed Feb'19 ESSC
LT: 9-10/10/18 Follow-up end March 19
EE: 30-31/10/18 Follow-up end March 19
DE: 29-30/11/18 Follow-up end June 19

4. Planning certification 2019
All countries confirmed planification apart
UK (NSI + Customs)
FR Customs
ES Customs
All ESS partners to be covered by end September
Final report to February 2020 ESSC

6. 2016 Grants – 1.27M€ funding country Start date end date amount
duration DE
06/03/2017
05/03/2018
44,150.08 12
95% GR
01/03/2017
30/01/2018
80,957.97 10 HR
22/02/2017
21/02/2018
164,260.85 IT
23/02/2107
22/02/2018
136,266.31 LU
15/12/2016
14/12/2017
138,879.06 LV
01/11/2017
66,168.20 8 NL
01/01/2017
31/12/2017
254,396.13 PL
20/03/2017
19/03/2018
100,783.00 SI
01/04/2017
31/03/2018
129,702.48 SK
03/03/2017
02/03/2018
150,588.00

7. 2017 Grants – 1.4M€ funding country Start date end date amount
duration AT
01/09/2017
31/8/2018
60,644.96 12
95% BG
01/10/2017
30/09/2018
121,553.32 CY
21/12/2017
20/12/2018
74,053.91 DK
15/12/2017
14/12/2018
67,500.00
70% EE
01/11/2017
29,059.49 11 HR
163,191.25 HU
01/02/2018
31/01/2019
206,980.87 LT
78,532.82 LU
01/01/2018
31/12/2018
176,896.37 MT
18/12/2017
17/12/2018
126,764.02 PL
27/12/2017
26/12/2018
102,358.33 PT
20/12/2017
19/12/2018
191,272.96

8. 2018 Grants – 1.18M€ funding country Start date end date amount
duration AT
01/12/2018
30/11/2019
64,488.65 12
95% BG
01/01/2019
31/12/2019
133,657.22 FI
26/11/2018
25/11/2019
130,491.51
86.9% HR
122,238.62 HU
01/02/2019
31/01/2020
100,916.32 LU
196,604.41 MT
01/10/2018
140,765.20 15 PL
31/07/2019
66,671.56 10 RO
114,315.45 SK
30/06/2019
114,752.09 7

9. 2019 Grants
March2019 – Launch of 4th Call for proposals for mono-beneficiary grants
Grants to start Q3 2019
1.2M€ funding budget

10. Workshops Conclusions
1st workshop on Information Classification – 5-6 October 2017 Madrid
Harmonise practices in terms of data classification and controls
Comparisons of the different classification schemes in the MS
guidelines for data classification and lookup tables for existing classifications
Conclusions
Availability of comparison table between classifications schemes used in the ESS members
Classification of all datasets sent by MS to ESTAT and harmonisation of protection measures

11. 2nd workshop on security incident management and putting in place a structure for exchanging within the ESS security incidents
May 2018 Barcelona
Define and identify important types of incidents relevant for the microdata exchange
Define exchange channels for information regarding any incident compromising the security
Conclusions
List of "security incidents" to be exchanged in the ESS including actions and response time
mechanisms for rapid exchanging of information between partners

12. 3rd workshop Impact on GDPR on the ESS exchange of microdata
Spain – beginning October 2019
European Data Supervisor + some DPOs
Focus on security consequences

13. Next Phase Launch call for tender for:
Analysis of current exercise and certification results
Gather opinion and feedback of some certified ESS members
Propose recommendations and models for the process beyond 2019
Discuss the identified models with ESS members (ITDG, ESS IT Security Task Force) and propose options with roadmaps
Deadline for completion of the analysis: end 2019
Presentation of the suggested option - post-2019 to February 2020 ESSC for endorsement

14. Thank You