Security Accreditation

Together with market development, security is one of the two core activities entrusted to the GSA by the EU Legislator pursuant to Article 16 of Regulation (EC) No 683/2008 and Regulation (EU) No 912/2010.

In particular, the Agency is responsible for the security accreditation of the European GNSS systems, i.e. to verify the compliance within the applicable security rules and regulations established by the Council and the European Commission. General principles for security accreditation, responsibilities and typical tasks are laid down in Regulation (EU) No 912/2010 under Chapter III.

An autonomous Security Accreditation Board (SAB) has been established within the Agency, as one of the three official bodies of the Agency together with the Administration Board and the Executive Director. The SAB is the sole Security Accreditation Authority of the European GNSS systems and acts independently of the authorities in charge of the programmes, notably the European Commission, the European Space Agency (ESA) and the rest of the European GNSS Agency (GSA).

The SAB is composed of one representative per Member State, one representative from the Commission and one from the High Representative. Norway and ESA are invited as observers.

The SAB Chairperson is responsible for representing the Agency on Security Accreditation matters. The Chairperson is currently Mr Jeremy Blyth (United-Kingdom) and the Deputy chair Mr Bruno Vermeire (Belgian).

The SAB initiates and monitors the implementation of security requirements to verify a high, robust and uniform level of security for the EU GNSS systems. In order to carry out its activities quickly and effectively, the SAB has set up two appropriate subordinate bodies acting on its instructions: the Galileo Security Accreditation Panel (GSAP) and a Crypto Distribution Authority (CDA). Within the Agency, technical security accreditation activities have been entrusted to a Security Accreditation Team composed of professionals duly qualified in accrediting complex systems.

The SAB adopts its decisions on the basis of local decisions taken by the competent national security accreditation authority, the verifications performed by the Security Accreditation Team and the reviews of the GSAP and CDA. These decisions entail in particular:

• the approval of the security accreditation strategy,
• the authorisation to launch satellites,
• the authorisation to operate the systems in their different configurations and various services, ,
• the authorisation to operate the ground stations and the sensor stations located in third countries,
• the authorisation to manufacture receivers containing PRS technology and their components.

SAB decisions are addressed to the European Commission.