8. 5.92 Official Journal of the European Communities No L 123/19 COUNCIL DECISION of 31 March 1992 in the field of security of information systems (92/242/EEC) THE COUNCIL OF THE EUROPEAN COMMUNITIES, Having regard to the Treaty establishing the European Economic Community, and in particular Article 235 thereof, ’ Having regard to the proposal from the Commission ('), Having regard to the opinion of the European Par- liament (3), Having regard to the opinion of the Economic and Social Committee (%), ‘Whereas the Community has as its task, by establishing a common market and progressively approximating the economic policies of the Member States, to promote throughout the Community a harmonious development of economic activities, a continuous and balanced expan- sion, an increase in stability, an accelerated raising of the standard of living and closer relations between the Member States ; Whereas information stored, processed and transmitted electronically plays an increasingly important role in economic and social activities ; Whereas the advent of efficient global communications and the pervasive use of electronic handling of informa- tion emphasizes the need for adequate protection ; Whereas the European Parliament has repeatedly stressed the importance of the security of information systems in its debates and resolutions ; Whereas the Economic and Social Committee has emphasized the need to address issues relating to the security of information systems in Community forms of action, particularly in view of the impact of the comple- tion of the internal market ; Whereas forms of action at national, international and Community levels provide a good basis ; Whereas there is a close link between telecommunica- tions, information technology, standardization, the infor- mation market and research, development and technology (RDT) policies, as well as the work already undertaken in these areas by the Community ; () OJ No C 277, 5. 11. 1990, p. 18. () OJ No C 94, 13. 3. 1992. () O No C 159, 17. 6. 1991, p. 38. Whereas it is appropriate to ensure that efforts are concerted by building on existing national and interna- tional work and by promoting cooperation between the principal parties concerned ; whereas it is therefore appro- priate to proceed within the framework of a coherent action plan ; Whereas the complexity of the security of information systems calls for the development of strategies to enable the free movement of information within the single market while ensuring the security of the use of informa- tion systems throughout the Community ; Whereas it is the responsibility of each Member State to take into account the constraints imposed by security and public order; - Whereas the responsibilities of the Member States in this area imply a concerted approach based on close collabora- tion with senior officials of the Member States; Whereas provision should be made for a plan of action for an initial period of twenty-four months and the setting-up of a Committee of Senior Officials with a long- term mandate to advise the Commission on forms of action in the area of security of information systems ; Whereas an amount of ECU 12 million is considered necessary to implement the action for an initial period of twenty-four months ; whereas for 1992, in the context of the present financial perspective, the amount estimated necessary is ECU 2 million ; Whereas the amounts to be committed in order to finance the programme for the period following the 1992 budget year will form part of the existing Community financial framework, HAS DECIDED AS FOLLOWS: Article 1 An action in the field of the security of information systems is hereby adopted. It comprises : — development of overall strategies for the security of information systems (action plan) for an initial period of 24 months, and — setting-up Senior Officials Group with a long-term mandate to advise the Commission on action to be undertaken in the field of the security of information systems, hereinafter referred to as the ‘Committee’.