Translation of "Manuel des mesures de sécurité - Établissement Mountain " (French → English) :

Security Procedures Manual (Mountain Institution)

establishing a mission-specific security plan based on guidance from the EEAS, including mission-specific physical, organisational and procedural security measures, governing management of the secure movement of personnel to, and within, the mission area, as well as the management of security incidents and including a mission contingency and evacuation plan;

55. Recalls that while the final responsibility for security measures relating to different payment methods cannot lie with customers, they should be informed about security precautions, and financial institutions should be responsible for fraud costs, unless caused by the customer ‘by acting fraudulently or by failing to fulfil one or more of his obligations under Article 56 of the Payment Service Directive with intent or gross negligence’; considers, therefore, that public information campaigns should be encouraged with a view to increasing public awareness and knowledge of digital security ...[+++] issues in particular; calls on the Commission, when developing a strategy and instruments for the integration of payment markets by card, internet and mobile phone, to take into account the standards and recommendations of EDPS regarding transparency, identification of the controller/ processor, proportionality and rights of the data subject; considers it important that all payment frauds in SEPA are reported to a centralised site for monitoring, statistics and evaluation, in order to respond quickly to new security threats, and that the main developments should be made public; asks the Commission to extend the concept of privacy by design beyond authentication mechanisms and security safeguards so as to ensure data minimisation, to implement privacy by default settings, to limit the access to individual's information to what is strictly needed to provide the service,- and to implement tools enabling users to better protect their personal data;

55. Recalls that while the final responsibility for security measures relating to different payment methods cannot lie with customers, they should be informed about security precautions, and financial institutions should be responsible for fraud costs, unless caused by the customer ‘by acting fraudulently or by failing to fulfil one or more of his obligations under Article 56 of the Payment Service Directive with intent or gross negligence’; considers, therefore, that public information campaigns should be encouraged with a view to increasing public awareness and knowledge of digital security ...[+++] issues in particular; calls on the Commission, when developing a strategy and instruments for the integration of payment markets by card, internet and mobile phone, to take into account the standards and recommendations of EDPS regarding transparency, identification of the controller/ processor, proportionality and rights of the data subject; considers it important that all payment frauds in SEPA are reported to a centralised site for monitoring, statistics and evaluation, in order to respond quickly to new security threats, and that the main developments should be made public; asks the Commission to extend the concept of privacy by design beyond authentication mechanisms and security safeguards so as to ensure data minimisation, to implement privacy by default settings, to limit the access to individual's information to what is strictly needed to provide the service,- and to implement tools enabling users to better protect their personal data;

55. Recalls that while the final responsibility for security measures relating to different payment methods cannot lie with customers, they should be informed about security precautions, and financial institutions should be responsible for fraud costs, unless caused by the customer "by acting fraudulently or by failing to fulfil one or more of his obligations under Article 56 of the Payment Service Directive with intent or gross negligence"; considers, therefore, that public information campaigns should be encouraged with a view to increasing public awareness and knowledge of digital security ...[+++] issues in particular; calls on the Commission, when developing a strategy and instruments for the integration of payment markets by card, internet and mobile phone, to take into account the standards and recommendations of EDPS regarding transparency, identification of the controller/ processor, proportionality and rights of the data subject; considers it important that all payment frauds in SEPA are reported to a centralised site for monitoring, statistics and evaluation, in order to respond quickly to new security threats, and that the main developments should be made public; asks the Commission to extend the concept of privacy by design beyond authentication mechanisms and security safeguards so as to ensure data minimisation, to implement privacy by default settings, to limit the access to individual's information to what is strictly needed to provide the service,- and to implement tools enabling users to better protect their personal data;