European Commission appoints new Directors-General to lead its departments for Informatics and for Interpretation, names three Deputy Directors-General // Brussels, 12 April 2016

17. Underlines that the public sector plays a key role in the development of cloud computing; welcomes the establishment of the European Cloud Partnership and the conclusions adopted by its steering board after its first meeting; stresses the need to elaborate EU-wide and national recommendations and best practices for transferring public IT use to the cloud, while ensuring a high level of awareness on the question of security, especially where personal data are concerned;

10. Calls on the Commission, in cooperation with the Member States, to assess the implementation of the CIIP action plan; urges the Member States to establish well-functioning national/governmental CERTs, develop national cyber security strategies, organise regular national and pan-European cyber incident exercises, develop national cyber incident contingency plans and contribute to the development of a European cyber incident contingency plan by the end of 2012;

9. Notes the Court of Auditors' finding that the Joint Undertaking has an adequate level of IT governance and practice for its size and mission; stresses, however, that the strategic IT planning and monitoring cycle, the security policies and rules, IT Risk management and Business Continuity Plan and Disaster Recovery Plan is lagging behind; calls on the Joint Undertaking to remedy the situation and provide the discharge authority with an up-to-date report on the matter;

19. Notes the Court of Auditors' finding that the Joint Undertaking has an adequate level of IT governance and practice for its size and mission; stresses, however, that the formalisation of policies and procedures in strategic IT planning and monitoring cycle, IT Risk management and Business Continuity Plan and Disaster Recovery Plan is lagging behind; urges the Joint Undertaking to develop an Action Plan with concrete measures and deadlines to speed up the formalisation of policies and procedures in the aforementioned areas and to report the progress achieved to the discharge authority;

19. Notes the Court of Auditors' finding that the Joint Undertaking has an adequate level of IT governance and practice for its size and mission; stresses, however, that the formalisation of policies and procedures in strategic IT planning and monitoring cycle, IT Risk management and Business Continuity Plan and Disaster Recovery Plan is lagging behind; urges the Joint Undertaking to develop an Action Plan with concrete measures and deadlines to speed up the formalisation of policies and procedures in the aforementioned areas and to report the progress achieved to the discharge authority;