natgillin/translations-raw huggingface dataset:
‘Security in the Commission’ means the security of persons, assets and information in the Commission, and in particular the physical integrity of persons and assets, the integrity, confidentiality and availability of information and communication and information systems, as well as the unobstructed functioning of Commission operations.
„varnost v Komisiji“ pomeni varnost oseb, sredstev in podatkov v Komisiji, zlasti fizično celovitost oseb in sredstev, celovitost, zaupnost in razpoložljivost podatkov ter komunikacijskih in informacijskih sistemov ter neovirano opravljanje dejavnosti Komisije;
‘Shared IT service’ means the service a CIS provides to other CISs in the processing of information.
„skupne storitve IT“ pomeni storitve pri obdelavi podatkov, ki jih KIS opravlja za druge KIS;
‘System owner’ is the individual responsible for the overall procurement, development, integration, modification, operation, maintenance, and retirement of a CIS.
„lastnik sistema“ je posameznik, ki je odgovoren za celotno nabavo, razvoj, združevanje, spreminjanje, upravljanje, vzdrževanje in umik KIS;
‘User’ means any individual who uses functionality provided by a CIS, whether inside or outside the Commission.
„uporabnik“ pomeni posameznika znotraj ali zunaj Komisije, ki uporablja funkcijo iz KIS.
Principles for IT security in the Commission
Načela za varnost IT v Komisiji
IT security in the Commission shall be based on the principles of legality, transparency, proportionality and accountability.
Varnost IT v Komisiji temelji na načelih zakonitosti, preglednosti, sorazmernosti in prevzemanja odgovornosti.
IT security issues shall be taken into account from the start of the development and implementation of Commission CISs.
Vprašanja glede varnosti IT se upoštevajo od vsega začetka razvoja in uvedbe KIS Komisije.
In order to do so, the Directorate-General for Informatics and the Directorate-General for Human Resources and Security shall be involved for their respective areas of responsibility.
V ta namen Generalni direktorat za informatiko in Generalni direktorat za človeške vire in varnost sodelujeta na svojem področju pristojnosti.
Effective IT security shall ensure appropriate levels of:
Učinkovita varnost IT zagotavlja ustrezno stopnjo:
authenticity: the guarantee that information is genuine and from bona fide sources;
avtentičnosti: zagotovilo, da so podatki pravi in iz zaupanja vrednih virov;
availability: the property of being accessible and usable upon request by an authorised entity;
razpoložljivosti: podatki so dostopni in jih je mogoče uporabljati na zahtevo pooblaščenega subjekta;
confidentiality: the property that information is not disclosed to unauthorised individuals, entities or processes.
zaupnosti: podatki se ne razkrijejo nepooblaščenim posameznikom in subjektom ali ne uporabijo v postopkih, kjer to ni dovoljeno;
integrity: the property of safeguarding the accuracy and completeness of assets and information;
celovitosti: zagotavljanje točnosti in popolnosti sestavnih delov in podatkov;
non-repudiation: the ability to prove an action or event has taken place, so that this event or action cannot subsequently be denied;
nezatajljivosti: zmožnost dokazati, da se je dejanje zgodilo ali da je prišlo do dogodka, tako da tega kasneje ni mogoče zanikati;
protection of personal data: the provision of appropriate safeguards in regard to personal data in full compliance with Regulation (EC) No 45/2001;
varstva osebnih podatkov: izvajanje ustreznih zaščitnih ukrepov v zvezi z osebnimi podatki ob popolnem upoštevanju Uredbe (ES) št. 45/2001;
professional secrecy: the protection of information of the kind covered by the obligation of professional secrecy, in particular information about undertakings, their business relations or their cost components as laid down in Article 339 of the TFEU.
poklicne skrivnosti: varstvo podatkov, za katere velja obveznost varovanja poslovne skrivnosti, zlasti informacij o podjetjih, njihovih poslovnih odnosih ali sestavinah stroškov, kot so določene v členu 339 PDEU.
IT security shall be based on a risk management process.
Varnost IT temelji na postopku obvladovanja tveganja.
This process shall aim at determining the levels of IT security risks and defining security measures to reduce such risks to an appropriate level and at a proportionate cost.
Cilj tega postopka je določiti ravni tveganj za varnosti IT in opredeliti varnostne ukrepe za ublažitev takih tveganj do ustrezne stopnje in ob sorazmernih stroških.
All CIS shall be identified, assigned to a system owner and recorded in an inventory.
KIS se določi, dodeli lastniku sistema in vnese v evidenco.
The security requirements of all CIS shall be determined on the basis of their security needs and of the security needs of the information they process.
Varnostne zahteve vseh KIS se ugotovijo na podlagi njihovih varnostnih potreb in varnostnih potreb informacij, ki jih obdelujejo.
CIS that provide services to other CIS may be designed to support specified levels of security needs.
KIS, ki opravljajo storitve za druge KIS, so lahko zasnovani tako, da podpirajo določene stopnje varnostnih potreb.
IT security plans and IT security measures shall be proportionate to the security needs of the CIS.
Varnostni načrti IT in varnostni ukrepi na področju IT so v sorazmerju z varnostnimi potrebami KIS.
The processes related to these principles and activities shall be further detailed in implementing rules.
Postopki v zvezi s temi načeli in dejavnostmi se podrobneje določijo v izvedbenih pravilih.
ORGANISATION AND RESPONSIBILITIES
ORGANIZACIJA IN OBVEZNOSTI
Corporate Management Board
Interni upravni odbor
The Corporate Management Board shall take the overall responsibility for the governance of IT security as a whole within the Commission.
Interni upravni odbor je splošno odgovoren za upravljanje varnosti IT kot celote znotraj Komisije.
Information Security Steering Board (ISSB)
Usmerjevalni odbor za varnost informacij (Information Security Steering Board, ISSB)
The ISSB shall be chaired by the Deputy Secretary-General responsible for IT security governance in the Commission.
Predsednik ISSB je namestnik generalnega sekretarja, odgovoren za upravljanje varnosti IT v Komisiji.
Its members shall represent business, technology and security interests across the Commission departments and include representatives of the Directorate-General for Informatics, the Directorate-General for Human Resources and Security, the Directorate-General for Budget, and, on a 2-year rotating basis, representatives of four other Commission departments involved where IT security is a major concern for their operations.
Njegovi člani predstavljajo poslovne, tehnološke in varnostne interese v vseh službah Komisije, med njimi so tudi predstavniki Generalnega direktorata za informatiko, Generalnega direktorata za človeške vire in varnost, Generalnega direktorata za proračun, in, po sistemu rotacije na dve leti, predstavniki še štirih udeleženih služb Komisije, v katerih je varnost IT zelo pomembna za njihovo delovanje.
Membership is at senior management level.
Članstvo je na ravni višjega vodstva.
The ISSB shall support the Corporate Management Board in its IT-security-related tasks.
ISSB nudi pomoč internemu upravnemu odboru pri nalogah, povezanih z varnostjo IT.
The ISSB shall take the operational responsibility for the governance of IT security as a whole within the Commission.
ISSB je operativno odgovoren za upravljanje varnosti IT kot celote znotraj Komisije.
The ISSB shall recommend the Commission's IT security policy for adoption by the Commission.
ISSB predlaga Komisiji v sprejetje politiko Komisije za varnost IT.
The ISSB shall review and report biannually to the Corporate Management Board on governance matters as well as on IT-security-related issues, including serious IT security incidents.
ISSB vsaki dve leti pregleda položaj upravljanja in vprašanja o varnosti IT, vključno z resnimi varnostnimi incidenti IT, ter o njih poroča internemu upravnemu odboru.
The ISSB shall monitor and review the overall implementation of this decision and report on it to the Corporate Management Board.
ISSB spremlja in pregleduje celotno izvajanje tega sklepa in o njem poroča internemu upravnemu odboru.
On the proposal of the Directorate-General for Informatics, the ISSB shall review, approve and monitor the implementation of the rolling IT security strategy.
ISSB na predlog Generalnega direktorata za informatiko pregleda, odobri in spremlja izvajanje veljavne strategije varnosti IT.
The ISSB shall report on it to the Corporate Management Board.
ISSB o njej poroča internemu upravnemu odboru.
The ISSB shall monitor, evaluate and control the corporate information risk treatment landscape and shall have the power to issue formal requirements for improvements wherever necessary.
ISSB spremlja, oceni in nadzoruje položaj na področju obvladovanja tveganja glede informacijske varnosti organizacije in je po potrebi pristojen za izdajo formalnih zahtevkov za izboljšave.
The processes related to these responsibilities and activities shall be further detailed in implementing rules.
Postopki v zvezi s temi obveznostmi in dejavnostmi se podrobneje določijo v izvedbenih pravilih.
In relation to IT security, the Directorate-General for Human Resources and Security has the following responsibilities.
Generalni direktorat za človeške vire in varnost ima glede varnosti IT obveznosti, ki so navedene v nadaljevanju.
It shall:
Direktorat izvaja naslednje naloge:
assure alignment between the IT security policy and the Commission's information security policy;
zagotavlja usklajenost politike za varnost IT s politiko Komisije za varnost informacij;
establish a framework for the authorisation of the use of encrypting technologies for the storage and communication of information by CISs;
določa okvir za dovoljevanje uporabe šifrirnih tehnologij za shranjevanje in sporočanje informacij s strani KIS;
inform the Directorate-General for Informatics about specific threats which could have a significant impact on the security of CISs and the data sets that they process;
obvešča Generalni direktorat za informatiko o posebnih grožnjah, ki bi lahko znatno vplivale na varnost KIS in naborov podatkov, ki jih obdelujejo;
perform IT security inspections to assess the compliance of the Commission's CISs with the security policy, and report the results to the ISSB;
izvaja varnostne preglede za oceno upoštevanja varnostne politike v KIS Komisije in o rezultatih poroča ISSB;
establish a framework for the authorisation of access and the associated appropriate security rules to Commission CISs from external networks and develop the related IT security standards and guidelines in close cooperation with the Directorate-General for Informatics;
določi okvir za dovoljevanje dostopa v KIS Komisije iz zunanjih omrežij in z njim povezana ustrezna varnostna pravila ter oblikuje standarde in smernice za varnost IT v tesnem sodelovanju z Generalnim direktoratom za informatiko;
propose principles and rules for the outsourcing of CISs in order to maintain appropriate control of security of the information;
predlaga načela in pravila za zunanje izvajanje KIS, da bi ohranil ustrezen nadzor nad varnostjo informacij;
develop the related IT security standards and guidelines in relation to Article 6, in close cooperation with the Directorate-General for Informatics.
oblikuje sorodne standarde in smernice za varnost IT v zvezi s členom 6 v tesnem sodelovanju z Generalnim direktoratom za informatiko.
The Directorate-General for Informatics
Generalni direktorat za informatiko
In relation to the overall IT security of the Commission, the Directorate-General for Informatics has the following responsibilities.
Generalni direktorat za informatiko ima glede splošne varnosti IT Komisije obveznosti, ki so navedene v nadaljevanju.
develop IT security standards and guidelines, except as provided in Article 6, in close cooperation with the Directorate-General for Human Resources and Security, in order to assure consistency between the IT security policy and the Commission's information security policy, and propose them to the ISSB;
oblikuje standarde in smernice za varnost IT, razen kakor je določeno v členu 6, v tesnem sodelovanju z Generalnim direktoratom za človeške vire in varnost, da zagotovi skladnost med politiko za varnost IT in politiko Komisije za varnost informacij, in jih predlaga ISSB;
assess the IT security risk management methods, processes and outcomes of all Commission departments and report on this regularly to the ISSB;
ocenjuje metode, postopke in rezultate obvladovanja tveganja za varnost IT vseh služb Komisije in o tem redno poroča ISSB;
propose a rolling IT security strategy for revision and approval by the ISSB and further adoption by the Corporate Management Board, and propose a programme, including the planning of projects and activities implementing the IT security strategy;
predlaga ISSB veljavno strategijo varnosti IT v pregled in odobritev ter v nadaljnje sprejetje v internem upravnem odboru ter predlaga program, vključno z načrtovanjem projektov in dejavnosti za izvajanje strategije varnosti IT;
monitor the execution of the Commission's IT security strategy and report on this regularly to the ISSB;
spremlja izvajanje strategije Komisije za varnost IT in o njem redno poroča ISSB;
monitor the IT security risks and IT security measures implemented in CISs and report on this regularly to the ISSB;
spremlja tveganja za varnost IT in varnostne ukrepe na področju IT, ki jih izvajajo KIS, in o njih redno poroča ISSB;
report regularly on the overall implementation and compliance with this decision to the ISSB;
redno poroča ISSB o celotnem izvajanju in upoštevanju tega sklepa;
after consulting with the Directorate-General for Human Resources and Security, request system owners to take specific IT security measures in order to mitigate IT security risks to Commission's CISs;
po posvetovanju z Generalnim direktoratom za človeške vire in varnost zahteva od lastnikov sistema, da izvedejo posebne varnostne ukrepe na področju IT za ublažitev tveganj za varnost IT za KIS Komisije;
ensure that there is an adequate catalogue of the Directorate-General for Informatics IT security services available for the system owners and data owners to fulfil their responsibilities for IT security and to comply with the IT security policy and standards;
zagotavlja, da je lastnikom sistema in lastnikom podatkov na razpolago ustrezen seznam storitev varnosti IT Generalnega direktorata za informatiko, da lahko izpolnjujejo svoje obveznosti za varnost IT in upoštevajo politiko in standarde za varnost IT;
provide adequate documentation to system and data owners and consult with them, as appropriate, on the IT security measures implemented for their IT services in order to facilitate compliance with the IT security policy and support the system owners in IT risk management;
lastnikom sistema in podatkov zagotavlja ustrezno dokumentacijo ter se po potrebi posvetuje z njimi o varnostnih ukrepih na področju IT, ki jih izvajajo za svoje storitve IT, da bi olajšal upoštevanje politike za varnost IT in nudil pomoč lastnikom sistema pri obvladovanju tveganj na področju IT;
organise regular meetings of the LISOs network and supporting LISOs in carrying out their duties;
organizira redna srečanja omrežja LISO in jih podpira pri opravljanju dolžnosti;
define the training needs and coordinate training programmes on IT security in cooperation with the Commission departments, and develop, implement and coordinate awareness-raising campaigns on IT security in close cooperation with the Directorate-General for Human Resources;
opredeljuje potrebe po usposabljanju in usklajuje programe usposabljanja na področju varnosti IT s službami Komisije ter v tesnem sodelovanju z Generalnim direktoratom za človeške vire in varnost oblikuje, izvaja in usklajuje kampanje ozaveščanja glede varnosti IT;
ensure that system owners, data owners and other roles with IT security responsibilities in Commission departments are made aware of the IT security policy;
zagotavlja, da so lastniki sistema, lastniki podatkov in nosilci drugih vlog z obveznostmi glede varnosti IT v službah Komisije seznanjeni s politiko za varnost IT;
inform the Directorate-General for Human Resources and Security on specific IT security threats, incidents and exceptions to the Commission's IT security policy notified by the system owners which could have a significant impact on security in the Commission;
obvešča GD za človeške vire in varnost o posebnih grožnjah za varnost IT, incidentih in izjemah od politike Komisije za varnost IT, ki so jih uradno sporočili lastniki sistema in ki bi lahko znatno vplivali na varnost v Komisiji;
in respect of its role as an internal IT service provider, deliver to the Commission a catalogue of shared IT services that provide defined levels of security.
glede na svojo vlogo notranjega izvajalca storitev IT Komisiji predloži seznam skupnih storitev IT, ki omogočajo opredeljene ravni varnosti.
This shall be done by systematically assessing, managing and monitoring IT security risks to implement the security measures in order to reach the defined security level.
To se opravlja s sistematičnim ocenjevanjem, upravljanjem in spremljanjem tveganj za varnost IT s ciljem izvajanja varnostnih ukrepov za dosego opredeljene ravni varnosti.
The related processes and more detailed responsibilities shall be further defined in implementing rules.
Sorodni postopki in podrobnejše obveznosti se dodatno opredelijo v izvedbenih pravilih.
In relation to IT security in their department, each Head of Commission department shall:
Vsak vodja službe Komisije glede varnosti IT v svoji službi:
formally appoint a system owner, who is an official or a temporary agent, for each CIS who will be responsible for IT security of that CIS and formally appoint a data owner for each data set handled in a CIS who should belong to the same administrative entity which is the Data Controller for data sets subject to Regulation (EC) No 45/2001;
za vsak KIS uradno imenuje lastnika sistema, ki je uradnik ali začasni uslužbenec in ki bo odgovoren za varnost IT navedenega KIS, ter uradno imenuje lastnika podatkov za vsak nabor podatkov, s katerim upravlja KIS; imenovani lastnik podatkov mora spadati v upravno enoto, ki je upravljavec podatkov za nabore podatkov, za katere velja Uredba (ES) št. 45/2001;
formally designate a Local Informatics Security Officer (LISO) who can perform the responsibilities independently from system owners and data owners.
uradno imenuje lokalnega varnostnega uradnika za informatiko (LISO), ki lahko izpolnjuje obveznosti neodvisno od lastnikov sistema in lastnikov podatkov.
A LISO can be designated for one or more Commission departments
LISO se lahko imenuje za eno ali več služb Komisije;
ensure that appropriate IT security risk assessments and IT security plans have been made and implemented
zagotavlja pripravo in izvajanje ustreznih ocen tveganja za varnost IT in varnostnih načrtov IT;
ensure that a summary of IT security risks and measures is reported on a regular basis to the Directorate-General for Informatics;
zagotavlja redno poročanje Generalnemu direktoratu za informatiko v obliki povzetka tveganj in ukrepov za varnost IT;
ensure, with the support of the Directorate-General for Informatics, that appropriate processes, procedures and solutions are in place to ensure efficient detection, reporting and resolution of IT security incidents relating to their CISs;
ob podpori Generalnega direktorata za informatiko zagotavlja uvedbo ustreznih procesov, postopkov in rešitev za učinkovito odkrivanje varnostnih incidentov IT v zvezi s svojimi KIS, poročanje o njih in njihovo reševanje;
launch an emergency procedure in case of IT security emergencies;
v izrednih razmerah v zvezi z varnostjo IT začne postopek za izredne razmere;
hold ultimate accountability for IT security including the responsibilities of the system owner and data owner;
je na končni stopnji odgovoren za varnost IT, vključno z obveznostmi lastnika sistema in lastnika podatkov;
own the risks relating to their CISs and data sets;
je lastnik tveganj v zvezi s svojimi KIS in nabori podatkov;
resolve any disagreements between data owners and system owners and in case of continued disagreement bring the issue before the ISSB for resolution;
razrešuje nesoglasja med lastniki podatkov in lastniki sistema, v primeru trajnega nesoglasja pa zadevo preda v reševanje ISSB;
ensure that IT security plans and IT security measures are implemented and the risks are adequately covered.
zagotavlja izvajanje varnostnih načrtov IT in varnostnih ukrepov na področju IT in ustrezno obvladovanje tveganj.
System owners
Lastniki sistema
The system owner is responsible for the IT security of the CIS, and reports to the Head of the Commission department.
Lastnik sistema odgovarja za varnost IT v KIS in poroča vodji službe Komisije.
In relation to IT security, the system owner shall:
Lastnik sistema v zvezi z IT:
ensure the compliance of the CIS with the IT security policy;
zagotavlja upoštevanje politike za varnost IT v KIS;
ensure that the CIS is accurately recorded in the relevant inventory;
zagotavlja, da je KIS natančno evidentiran v ustrezni evidenci;
assess IT security risks and determine the IT security needs for each CIS, in collaboration with the data owners and in consultation with the Directorate-General for Informatics;
v sodelovanju z lastniki podatkov in v posvetovanju z Generalnim direktoratom za informatiko ocenjuje tveganja za varnost IT in določa varnostne potrebe IT za vsak KIS;
prepare a security plan, including, where appropriate, details of the assessed risks and any additional security measures required;
pripravlja varnostni načrt, po potrebi tudi s podrobnimi podatki o ocenjenih tveganjih in potrebnih dodatnih varnostnih ukrepih;
implement appropriate IT security measures, proportionate to the IT security risks identified and follow recommendations endorsed by the ISSB;
izvaja ustrezne varnostne ukrepe na področju IT, ki so v sorazmerju z ugotovljenimi tveganji za varnost IT, in upošteva priporočila, ki jih je odobril ISSB;
identify any dependencies on other CISs or shared IT services and implement security measures as appropriate based on the security levels proposed by those CISs or shared IT services;
ugotavlja odvisnost od drugih KIS ali skupnih storitev IT in izvaja varnostne ukrepe, kot je primerno, na podlagi varnostnih ravni, ki so jih predlagali navedeni KIS ali skupne storitve IT;
manage and monitor IT security risks;
obvladuje in spremlja tveganja za varnost IT;
report regularly to the head of the Commission department on the IT security risk profile of their CIS and report to the Directorate-General for Informatics on the related risks, risk management activities and security measures taken;
redno poroča vodji službe Komisije o profilu tveganja za varnost IT svojega KIS, Generalnemu direktoratu za informatiko pa poroča o povezanih tveganjih, dejavnostih obvladovanja tveganja in sprejetih varnostnih ukrepih;
consult the LISO of the relevant Commission department(s) on aspects of IT Security;
se posvetuje z LISO ustreznih služb Komisije o vidikih varnosti IT;
issue instructions for users on the use of the CIS and associated data as well as on the responsibilities of users related to CIS;
daje navodila uporabnikom o uporabi KIS in povezanih podatkov ter o obveznostih uporabnikov v zvezi s KIS;
request authorisation from the Directorate-General for Human Resources and Security, acting as the Crypto Authority, for any CIS that uses encrypting technology.
zaprosi Generalni direktorat za človeške vire in varnost kot organ za šifrirne metode in izdelke (Crypto Authority) za avtorizacijo za vsak KIS, ki uporablja šifrirno tehnologijo;
consult the Commission Security Authority in advance concerning any system processing EU classified information;
se predhodno posvetuje z varnostnim organom Komisije o vsakem sistemu, ki obdeluje tajne podatke EU;
ensure that back-ups of any decryption keys are stored in an escrow account.
zagotavlja hranjenje varnostnih kopij ključev za dešifriranje na računu za hrambo.