1. IT security assurance – new role of ITDG Item 3 of the agenda DIME/ITDG Steering Group June 2018
Pascal JACQUES ESTAT B2/LISO

2. New certification procedure
ESSC empowered ITDG:
To validate the results of the certification process
On a monthly basis through written procedure
To allow faster access to production data by MS
Annual overall validation of all certifications by ESSC (February)

3. Access to MDE data
All MS able to send MDE data after ESTAT certification (end October 2018)
MS will be able to receive MDE after certification endorsement by ITDG
CBS (NL)
ISTAT (IT)
SURS (SI) …

4. ITDG Written procedure
An official note will be sent by to all ITDG representatives
Asking for validation of the PWC results for the NSI(s) finalised during the month
Emphasising residual risks (if any)
Registered in the Eurostat official document management system ARES
Response period of 14 days
A missing reply is considered as a vote "for"
A concluding note will be sent to inform all delegates
about the results of the procedure
To validate officially the certification of the NSI(s)

5. Planning of certifications 2018IT
NDA signed
Final checks ongoing
SI: 05/18
visit done 28-29/5
feedback provided to SURS and accepted
CAR (corrective action report) and milestone under drafting
BE (NBB): 9-10/07/18
SE: 2-3/10/18
LT: 8-9/10/18
ESTAT: 8-12/10/18
EE: 31/10-1/11/18
DE: 29-30/11/18 ??

6. Requirements
Availability of an updated list of IT directors and backup
Confirm that:
IT security policies on NSI website are published
appointment of at least one security officer in each NSI