natgillin/translations-raw huggingface dataset:
The Security Policy shall be based on a risk assessment.
Varnostna politika temelji na oceni tveganja.
The measures described by the Security Policy shall be proportionate to the risks identified.
Ukrepi, opisani v varnostni politiki, so sorazmerni z opredeljenimi tveganji.
The risk assessment and the Security Policy shall be updated if technological changes, identification of new threats or any other circumstances make it necessary.
Ocena tveganja in varnostna politika se po potrebi posodabljata zaradi tehnoloških sprememb, odkritja novih nevarnosti ali kakršnih koli drugih okoliščin.
The Security Policy shall be reviewed in any event on an annual basis to ensure that it is still appropriately responding to the latest risk assessment or any other newly identified technological change, threat or other relevant circumstance.
Varnostna politika se v vsakem primeru revidira letno, s čimer se zagotovi, da vedno ustreza najnovejši oceni tveganja ali kateri koli drugi novi tehnološki spremembi, novoodkriti nevarnosti ali drugi pomembni okoliščini.
The Security Policy shall be prepared by the System Security Officer, in coordination with the Local Security Officer for the VIS and the Local Security Officer for the communication infrastructure.
Varnostno politiko pripravi sistemski varnostni uradnik ob usklajevanju z lokalnim varnostnim uradnikom za VIS in lokalnim varnostnim uradnikom za komunikacijsko infrastrukturo.
Implementation of the security measures
Izvajanje varnostnih ukrepov
The implementation of tasks and requirements laid down in this Decision and in the Security Policy, including the task of designating a Local Security Officer, may be contracted out or entrusted to private or public bodies.
Izpolnjevanje nalog in zahtev, določenih v tem sklepu in varnostni politiki, vključno z nalogo imenovanja lokalnega varnostnega uradnika, se lahko odda zunanjim izvajalcem ali poveri zasebnim ali javnim organizacijam.
In this case the Commission shall ensure through legally binding agreement that the requirements laid down in this Decision and in the Security Policy, are fully complied with.
V tem primeru Komisija s pravno zavezujočim dogovorom zagotovi, da se zahteve, določene v tem sklepu in varnostni politiki, v celoti upoštevajo.
In case of delegation or contracting out of the task of designating a Local Security Officer, the Commission shall ensure through legally binding agreement that it will be consulted on the person to be designated as Local Security Officer.
Če se naloga imenovanja lokalnega varnostnega uradnika delegira ali se njeno izvajanje odda zunanjim izvajalcem, Komisija s pravno zavezujočim dogovorom zagotovi, da se bo izvajalec naloge s Komisijo posvetoval o osebi, imenovani za lokalnega varnostnega uradnika.
Facilities access control
Nadzor dostopa do opreme
Security perimeters with appropriate barriers and entry controls shall be used to protect areas that contain data processing facilities.
Za zavarovanje krajev, kjer je nameščena oprema za obdelavo podatkov, se postavijo varnostna območja z ustreznimi zaporami in vstopnimi kontrolami.
Within the security perimeters, secure areas shall be defined to protect the physical components (assets), including hardware, data media and consoles, plans and other documents on the VIS as well as offices and other work places of staff involved in operating the VIS.
Znotraj varnostnih območij se določijo varovana območja, da se zaščitijo fizične komponente (sredstva), vključno s strojno opremo, nosilci podatkov in konzolami, načrti in drugimi dokumenti o VIS ter pisarnami in drugimi delovnimi mesti osebja, vključenega v delovanje VIS.
These secure areas shall be protected by appropriate entry controls to ensure that only authorised personnel are allowed access.
Ta varovana območja se zavarujejo z ustreznimi vstopnimi kontrolami, da se zagotovi, da lahko do varovanih območij dostopa samo pooblaščeno osebje.
Work in secure areas shall be subject to the detailed security rules set out in the Security Policy.
Za delo v varovanih območjih veljajo podrobna varnostna pravila, določena v varnostni politiki.
Physical security for offices, rooms and facilities shall be foreseen and installed.
Fizično varovanje se predvidi in namesti za pisarne, sobe in opremo.
Access points such as delivery and loading areas and other points where unauthorised persons may enter the premises shall be controlled and, if possible, isolated from data processing facilities to avoid unauthorised access.
Dostopne točke, kot so območja za dostavo in natovarjanje, ter druge točke, kjer lahko v prostore vstopajo nepooblaščene osebe, se nadzorujejo in so po možnosti ločene od območij z opremo za obdelavo podatkov, da se prepreči nepooblaščen dostop.
A physical protection of the security perimeters against damage from natural or man-made disaster shall be designed and applied proportionally to the risk.
Oblikuje in uporablja se tveganju sorazmerna fizična zaščita varnostnih območij pred naravnimi nesrečami in nesrečami, ki jih povzroči človek.
Equipment shall be protected from physical and environmental threats and from opportunities for unauthorised access.
Oprema se zaščiti pred fizičnimi in okoljskimi nevarnostmi ter možnostmi za nepooblaščeni dostop.
If such information is available to the Commission, it shall add to the list referred to in Article 2(2)(f) a single point of contact for monitoring the implementation of the provisions of this Article at the premises where the backup central VIS is located.
Če ima Komisija take informacije na voljo, doda seznamu iz člena 2(2)(f) enotno kontaktno točko za nadzor izvajanja določb tega člena v prostorih varnostne kopije centralnega VIS.
Data media and asset control
Nadzor nosilcev podatkov in sredstev
Removable media containing data shall be protected against unauthorised access, misuse or corruption and its readability shall be ensured during the whole lifetime of the data.
Odstranljivi nosilci podatkov, ki vsebujejo podatke, se zaščitijo pred nepooblaščenim dostopom, zlorabo ali poškodovanjem, njihova berljivost pa se zagotavlja skozi celotno življenjsko dobo podatkov.
Media shall be disposed securely and safely when no longer required, in accordance with the detailed procedures to be set out in the Security Policy.
Ko nosilci podatkov niso več potrebni, se zavržejo varno v skladu s podrobnimi postopki, ki se določijo v varnostni politiki.
Inventories shall ensure that information on the storage location, the applicable retention period and access authorisations are available.
Z evidencami se zagotavljajo informacije o lokacijah, kjer so podatki shranjeni, veljavnih obdobjih shranjevanja in dovoljenjih za dostop.
All important assets of the central VIS and the communication infrastructure shall be identified, so that they can be protected in accordance with their importance.
Vsa pomembna sredstva centralnega VIS in komunikacijske infrastrukture se določijo, da se jih zaščiti glede na njihovo pomembnost.
An up-to-date register of relevant IT equipment shall be kept.
Vodi se register pomembne opreme IT, ki se stalno posodablja.
An up-to-date documentation of the central VIS and the communication infrastructure shall be available.
Na voljo je dokumentacija o centralnem VIS in komunikacijski infrastrukturi, ki se stalno posodablja.
Such documentation must be protected against unauthorised access.
To dokumentacijo je treba zaščititi pred nepooblaščenim dostopom.
Storage control
Nadzor shranjevanja
Appropriate measures shall be taken to ensure proper storage of information and the prevention of unauthorised access thereto.
Sprejmejo se ustrezni ukrepi, da se zagotovi ustrezno shranjevanje informacij in prepreči nepooblaščen dostop do njih.
All items of equipment containing storage media shall be checked to ensure that sensitive data have been removed or fully overwritten prior to disposal, or shall be securely destroyed.
Vsi elementi opreme, ki vsebujejo nosilce za shranjevanje podatkov, se varno uničijo ali pa se pred zavrženjem pregledajo, da se zagotovi, da so bili vsi občutljivi podatki odstranjeni ali v celoti prepisani z drugimi podatki.
Password control
Nadzor gesel
All passwords shall be kept safely and treated confidentially.
Vsa gesla se hranijo na varnem in obravnavajo zaupno.
In case of suspicion that a password has been disclosed, the password has to be changed immediately or the user account has to be disabled.
Če se pojavi sum, da je bilo geslo razkrito, je treba to geslo nemudoma zamenjati ali onemogočiti uporabniški račun.
Unique and individual user identities shall be used.
Uporabljajo se enolične in individualne uporabniške identitete.
Procedures shall be defined in the Security Policy for logging in and out to prevent any unauthorised access.
V varnostni politiki se opredelijo postopki za prijavljanje in odjavljanje, da se prepreči vsak nepooblaščen dostop.
The Security Policy shall establish a formal staff registration and de-registration procedure in place for granting and revoking access to VIS hardware and software at the central VIS for the purposes of the operational management.
Z varnostno politiko se določi postopek za uradno registracijo in preklic registracije zaposlenih, s katerim se za namene operativnega upravljanja odobri ali prekliče dostop do strojne in programske opreme centralnega VIS.
The allocation and use of adequate access credentials (passwords or other appropriate means) shall be controlled through a formal management process as laid down in the Security Policy.
Dodeljevanje in uporaba ustreznih poverilnic za dostop (gesel ali drugih ustreznih sredstev) se nadzorujeta z uradnim upravljavskim postopkom, kot je določen v varnostni politiki.
Access to VIS hardware and software at the central VIS shall:
Dostop do strojne in programske opreme centralnega VIS:
be restricted to authorised persons;
je dovoljen samo pooblaščenim osebam;
be limited to cases where a legitimate purpose in accordance with Articles 42 and 50(2) of Regulation (EC) No 767/2008 can be identified;
je omejen na primere, ko je mogoče ugotoviti legitimen interes v skladu s členom 42 in členom 50(2) Uredbe (ES) št. 767/2008;
not exceed the duration and scope necessary for the purpose of the access; and
ne traja dlje in ni obsežnejši, kot je potrebno za namen dostopa, in
take place only in accordance with an access control policy to be defined in the Security Policy.
se omogoča samo v skladu s politiko nadzora dostopa, ki se določi v varnostni politiki.
Only the consoles and software authorised by the Local Security Officer for central VIS shall be used at the central VIS.
Pri centralnem VIS se uporabljajo samo konzole in programska oprema, ki jih je odobril lokalni varnostni uradnik za centralni VIS.
The use of system utilities that might be capable of overriding system and application controls shall be restricted and controlled.
Uporaba sistemskih pripomočkov, ki bi lahko obšli sistemski in programski nadzor, se omeji in nadzoruje.
There shall be procedures in place to control the installation of software.
Uvedejo se postopki za nadzor nameščanja programske opreme.
Communication control
Nadzor sporočanja
The communication infrastructure shall be monitored in order to provide availability, integrity and confidentiality for the information exchanges.
Komunikacijska infrastruktura se nadzoruje, da se zagotovijo razpoložljivost, celovitost in zaupnost izmenjave podatkov.
Cryptographic means shall be used to protect the data transmitted in the communication infrastructure.
Za zaščito podatkov, ki se prenašajo po komunikacijski infrastrukturi, se uporabljajo šifrirna sredstva.
Control of data recording
Nadzor beleženja podatkov
Accounts for persons authorised to access VIS software from the central VIS shall be monitored by the Local Security Officer for the central VIS.
Račune oseb, ki jim je bil odobren dostop do programske opreme VIS prek centralnega VIS, nadzoruje lokalni varnostni uradnik za centralni VIS.
Use of those accounts, including time and user identity shall be registered.
Uporaba teh računov, vključno s časom in uporabniško identiteto, se evidentira.
Transport control
Nadzor prenosa
Appropriate measures shall be defined in the Security Policy to prevent unauthorised reading, copying, modification or deletion of personal data during the transmission to or from the VIS or during the transport of data media.
V varnostni politiki se določijo ustrezni ukrepi, da se preprečijo nepooblaščeno branje, kopiranje, spreminjanje ali brisanje osebnih podatkov med njihovim prenosom v VIS ali iz njega ali med prenosom nosilcev podatkov.
Provisions shall be laid down in the Security Policy with regard to the admissible types of dispatch or transport as well as in respect of accountability procedures for the transport of items and their arrival at the place of destination.
Varnostna politika vsebuje določbe o dovoljenih oblikah pošiljanja ali prenosa ter o postopkih glede odgovornosti za prenos predmetov in njihov prihod v namembni kraj.
The data medium shall not contain any data other than the data which is to be sent.
Nosilec podatkov ne vsebuje nobenih drugih podatkov, razen tistih, ki jih je treba poslati.
Services delivered by third parties involving accessing, processing, communicating or managing data processing facilities or adding products or services to data processing facilities shall have appropriate integrated security controls.
Storitve, ki jih zagotavljajo tretje osebe in vključujejo dostop, obdelavo in sporočanje podatkov ali upravljanje opreme za obdelavo podatkov ali dodajanje proizvodov ali storitev opremi za obdelavo podatkov, imajo nameščene ustrezne varnostne kontrole.
Security of the communication infrastructure
Varnost komunikacijske infrastrukture
The communication infrastructure shall be adequately managed and controlled in order to protect it from threats and to ensure the security of the communication infrastructure itself and of central VIS, including data exchanged through it.
Komunikacijska infrastruktura se ustrezno upravlja in nadzoruje, da se zaščiti pred nevarnostmi ter da se zagotovi varnost komunikacijske infrastrukture in centralnega VIS, vključno s podatki, ki se izmenjujejo skozi njiju.
Security features, service levels and management requirements of all network services shall be identified in the network service agreement with the service provider.
Varnostni elementi, ravni storitev in zahteve upravljanja za vse omrežne storitve se opredelijo v dogovoru o zagotavljanju omrežnih storitev s ponudnikom storitev.
Besides protecting the VIS access points, any additional service being used by the communication infrastructure shall also be protected.
Poleg dostopnih točk VIS se zaščitijo tudi vse dodatne storitve, ki jih uporablja komunikacijska infrastruktura.
Appropriate measures shall be defined in the Security Policy.
Ustrezni ukrepi se določijo v varnostni politiki.
Logs recording the information referred to in Article 34(1) of Regulation (EC) No 767/2008 relating to every access to and all data processing operations within the central VIS shall be kept securely stored on, and accessible from the premises where the principal and backup central VIS sites are located for the period referred to in Article 34(2) of Regulation (EC) No 767/2008.
V prostorih glavnega centralnega VIS in varnostne kopije centralnega VIS se za obdobje iz člena 34(2) Uredbe (ES) št. 767/2008 varno hranijo in so iz teh prostorov dostopne evidence s podatki iz člena 34(1) Uredbe (ES) št. 767/2008, ki se nanašajo na vsak dostop do podatkov v centralnem VIS in na vsak postopek njihove obdelave.
Procedures for monitoring use or faults in information processing facilities shall be set out in the Security Policy and the results of the monitoring activities reviewed regularly.
V varnostni politiki se določijo postopki za spremljanje uporabe ali okvar opreme za obdelavo podatkov, rezultati dejavnosti spremljanja pa se redno pregledujejo.
If necessary, appropriate action shall be taken.
Po potrebi se ustrezno ukrepa.
Logging facilities and logs shall be protected against tampering and unauthorised access in order to meet the requirements of collecting and retain for the evidence retention period.
Sredstva za vodenje evidenc in evidence se zaščitijo pred nedovoljenimi posegi in nepooblaščenim dostopom, da se izpolnijo zahteve glede zbiranja podatkov in shranijo dokazi za obdobje shranjevanja.
Cryptographic measures
Šifrirni ukrepi
Cryptographic measures shall be used where appropriate for the protection of information.
Za zaščito informacij se po potrebi uporabljajo šifrirni ukrepi.
Their use, along with the purposes and conditions, must be approved by the System Security Officer in advance.
Uporabo ter namene in pogoje uporabe mora vnaprej odobriti sistemski varnostni uradnik.
HUMAN RESOURCES SECURITY
VARNOST ČLOVEŠKIH VIROV
Personnel profiles
Profili osebja
The Security Policy shall define the functions and responsibilities of persons who are authorised to access the VIS, including the communication infrastructure.
V varnostni politiki se določijo naloge in pristojnosti oseb, ki jim je bil odobren dostop do VIS, vključno s komunikacijsko infrastrukturo.
The security roles and responsibilities of Commission staff, contractors and staff involved in operational management shall be defined, documented and communicated to the persons concerned.
Varnostne vloge in pristojnosti osebja Komisije, izvajalcev in zaposlenih, vključenih v operativno upravljanje, se opredelijo, zapišejo in sporočijo zadevnim osebam.
The job description and the objectives shall state these roles and responsibilities for Commission staff; contracts or service level agreements shall state them for contractors.
Za osebje Komisije so te vloge in pristojnosti navedene v opisu dela in nalog ter ciljih; za izvajalce so te vloge in odgovornosti navedene v pogodbah ali dogovorih o ravni storitev.
Confidentiality and secrecy agreements shall be concluded with all persons to whom no European Union or Member State public service rules apply.
Z vsemi osebami, za katere ne veljajo pravila javnih služb Evropske unije ali držav članic, se sklenejo dogovori o zaupnosti in tajnosti.
Staff required to work with VIS data shall have the necessary clearance or certification in accordance with the detailed procedures to be set out in the Security Policy.
Zaposleni, ki morajo delati s podatki VIS, imajo potrebno dovoljenje ali potrdilo v skladu s podrobnimi postopki, ki se določijo v varnostni politiki.
Information of personnel
Informacije osebja
All staff and, where relevant, contractors shall receive appropriate training in security awareness, legal requirements, policies and procedures, to the extent required by their duties.
Vsem zaposlenim in po potrebi izvajalcem se zagotovi ustrezno usposabljanje o varnostni ozaveščenosti, pravnih zahtevah, politikah in postopkih, in sicer v obsegu, ki ga zahtevajo njihove dolžnosti.
At the termination of the employment or contract, responsibilities related to job change or employment termination shall be defined for staff and contractors in the Security Policy, and procedures shall be set out in the Security Policy to manage the return of assets and the removal of access rights.
V varnostni politiki se za osebje in izvajalce, ki jim preneha zaposlitev ali se jim izteče pogodba, določijo odgovornosti, povezane z menjavo ali prenehanjem zaposlitve, ter postopki za upravljanje vračila sredstev in odvzema pravic dostopa.
This Decision shall become applicable as of the date determined by the Commission in accordance with Article 48(1) of Regulation (EC) No 767/2008.
Ta sklep začne veljati z datumom, ki ga določi Komisija v skladu s členom 48(1) Uredbe (ES) št. 767/2008.
This Decision shall expire when the Management Authority takes up its responsibilities.
Ta sklep preneha veljati, ko upravljavski organ prevzame svoje naloge.
OJ L 194, 23.7.2008, p. 3.
UL L 194, 23.7.2008, str. 3.
on the Security Plan for Central SIS II and the Communication Infrastructure
o varnostnem načrtu za centralni SIS II in komunikacijsko infrastrukturo
Having regard to Regulation (EC) No 1987/2006 of the European Parliament and of the Council of 20 December 2006 on the establishment, operation and use of the second generation Schengen Information System (SIS II) [1] and in particular Article 16 thereof,
ob upoštevanju Uredbe (ES) št. 1987/2006 Evropskega parlamenta in Sveta z dne 20. decembra 2006 o vzpostavitvi, delovanju in uporabi druge generacije schengenskega informacijskega sistema (SIS II) [1] ter zlasti člena 16 Uredbe,
Having regard to Council Decision 2007/533/JHA of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System (SIS II) [2] and in particular Article 16 thereof,
ob upoštevanju Sklepa Sveta 2007/533/PNZ z dne 12. junija 2007 o vzpostavitvi, delovanju in uporabi druge generacije schengenskega informacijskega sistema (SIS II) [2] ter zlasti člena 16 Sklepa,
Article 16 of Regulation (EC) No 1987/2006 and Article 16 of Decision 2007/533/JHA provide that the Management Authority, in relation to Central SIS II, and the Commission, in relation to the Communication Infrastructure, should adopt the necessary measures, including a security plan.
Člen 16 Uredbe (ES) št. 1987/2006 in člen 16 Sklepa 2007/533/PNZ določata, da upravljavski organ sprejme potrebne ukrepe, vključno z varnostnim načrtom, v zvezi s centralnim SIS II, Komisija pa to stori v zvezi s komunikacijsko infrastrukturo.
Article 15(4) of Regulation (EC) No 1987/2006 and Article 15(4) of Decision 2007/533/JHA provide that during a transitional period before the Management Authority takes up its responsibilities, the Commission should be responsible for the operational management of Central SIS II.
Člen 15(4) Uredbe (ES) št. 1987/2006 in člen 15(4) Sklepa 2007/533/PNZ določata, da je v prehodnem obdobju, dokler upravljavski organ ne prevzame svojih nalog, Komisija odgovorna za operativno upravljanje centralnega SIS II.
As the Management Authority has not yet been established, the security plan to be adopted by the Commission should be applicable also to Central SIS II for a transitional period.
Ker upravljavski organ še ni bil ustanovljen, je treba varnostni načrt, ki ga bo sprejela Komisija, v prehodnem obdobju uporabiti tudi za centralni SIS II.
Regulation (EC) No 45/2001 of the European Parliament and of the Council [3] applies to the processing of personal data by the Commission when carrying out its responsibilities in the operational management of SIS II.
Uredba (ES) št. 45/2001 Evropskega parlamenta in Sveta [3] se uporablja za obdelavo osebnih podatkov, ki jo izvaja Komisija v okviru svojih nalog operativnega upravljanja SIS II.
Article 15(7) of Regulation (EC) No 1987/2006 and Article 15(7) of Decision 2007/533/JHA provide that where the Commission delegates its responsibilities during the transitional period before the Management Authority takes up its responsibilities, it shall ensure that this delegation does not adversely affect any effective control mechanism under Union law, whether of the Court of Justice, the Court of Auditors or the European Data Protection Supervisor.
Člen 15(7) Uredbe (ES) št. 1987/2006 in člen 15(7) Sklepa 2007/533/PNZ določata, da Komisija ob prenosu svojih pristojnosti v prehodnem obdobju, dokler upravljavski organ ne prevzame svojih nalog, zagotovi, da ta prenos ne vpliva škodljivo na noben veljavni nadzorni mehanizem po zakonodaji Unije, naj bo to mehanizem Sodišča, Računskega sodišča ali Evropskega nadzornika za varstvo podatkov.
The Management Authority should adopt its own security plan in relation to Central SIS II once it will have taken up its responsibilities.
Ko upravljavski organ prevzame svoje naloge, mora oblikovati lasten varnostni načrt v zvezi s centralnim SIS II.
This security plan should therefore expire, to the extent it relates to the Central SIS II, when the Management Authority takes up its responsibilities.
Ko upravljavski organ prevzame svoje naloge, mora ta varnostni načrt prenehati veljati, kar zadeva centralni SIS II.