ANNEX G - PADR SECURITY CLASSIFICATION GUIDE
Security Classification Guide
Version 3.0
14 March 2019
PADR SCG V3.0 – 14 March 2019
IMPORTANT NOTICE
Table of Contents
This document aims at assisting national experts with the security scrutiny of PADR
proposals, informing applicants on how information will be EU-classified and helping
Commission staff to decide about the sensitivity of their calls for proposals.
This guidance concerns solely measures to be taken to protect the classified information in
PADR research projects. Other aspects (e.g. data protection, ethical issues, confidentiality
etc.) are covered in other parts of the evaluation procedure.
2
PADR SCG V3.0 – 14 March 2019
HISTORY OF CHANGES
Publication
Version Change
Date
1.0 18.12.2017 Initial version
2.0 15.09.2018 Addition of categories for 2018 topics
3.0 14.03.2019 Addition of categories for 2019 topics
TABLE OF CONTENTS
1. When and for how long must information be classified? .............................................. 4
2. Classification levels ...................................................................................................... 4
3. How to classify information? ........................................................................................ 4
Annex to the SCG.............................................................................................................. 6
3
PADR SCG V3.0 – 14 March 2019
1. When and for how long must information be classified?
Under the Commission Decision 2015/4441, information must be classified if its
unauthorised disclosure could adversely impact the interests of the EU or of
one (or more) of its Member States.
To minimise costs and restrictions caused by classifying project information, the
information items will be classified for a limited time — after which their classification
will be reviewed and possibly downgraded, withdrawn (i.e. items declassified) or
extended.
2. Classification levels
There are four levels of classification:2
TRES SECRET UE/EU TOP SECRET: information and material the unauthorised
disclosure of which could cause exceptionally grave prejudice to the essential
interests of the European Union or of one or more of the Member States. TRÈS
SECRET UE/EU TOP-SECRET is NOT used for the security scrutiny of research
proposals.
SECRET UE/EU SECRET: information and material the unauthorised disclosure
of which could seriously harm the essential interests of the European Union
or of one or more of the Member States. (S-UE/EU-S)
CONFIDENTIEL UE/EU CONFIDENTIAL: information and material the
unauthorised disclosure of which could harm the essential interests of the
European Union or of one or more of the Member States. (C-UE/EU-C)
RESTREINT UE/EU RESTRICTED: information and material the unauthorised
disclosure of which could be disadvantageous to the interests of the European
Union or of one or more of the Member States. (R-UE/EU-R)
3. How to classify information?
The classification of information produced by research projects will normally depend
on two parameters: the subject matter of the research and the type of the
information. The subject matter of the research is defined in the annual work
programmes of the PADR. Regarding the type of the information the following
general categories3 could be applied:
1
See Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security rules for protecting EU
classified information (OJ L 72, 17.3.2015, p.53.)
2
See. Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security rules for protecting
EU classified information (OJ L 72, 17.3.2015, p.53.)
3
These categories may overlap regarding specific items of information.
4
PADR SCG V3.0 – 14 March 2019
threat assessments (estimation of the likelihood of an act against an asset,
with particular reference to factors such as intention, capacity and potential
impact)
vulnerability assessments (description of gaps or weaknesses in networks,
services, systems, assets, materials, equipment, operations or processes which
can be exploited and often contain suggestions to eliminate or diminish these
weaknesses)
specifications (exact guidelines on the design, composition, manufacture,
maintenance or operation of substances, equipment, components, technologies,
systems and procedures)
capability assessments (description of the ability of an asset, system, network,
service or authority to fulfil its intended role — and in particular the capacity of
units, installations, systems, technologies, equipment, substances and personnel
to carry these out successfully)
incidents/scenarios (detailed information on real-life incidents and potential
threat scenarios:
on past incidents (often including details not otherwise publicly available,
demonstrating the real-life effects of particular attack methods or gaps
which have since been addressed)
on devised scenarios (commonly derived directly from existing
vulnerabilities, but normally with a lower level of detail, particularly of the
attack preparation phase).
Depending on the specific subject matter, each type of information may need to take
different level of classification. For the purpose of this document a table with
suggested level of classification for the topics of the work programme of 2017,
2018 and 2019 is found in appendix. Classification levels should be applied taking
into account both the need to protect information and the need to avoid unnecessary
obstruction to the use of research information and results.
5
PADR SCG V3.0 – 14 March 2019
Appendix to the SCG
SECRET UE/EU SECRET: S-UE/EU-S
CONFIDENTIEL UE/EU CONFIDENTIAL: C-UE/EU-C
RESTREINT UE/EU RESTRICTED: R-UE/EU-R
UNCLASSIFIED: UNCL
SCG TABLE
Research topic Type of Information
Threat Vulnerability Specifications Capability Inc/Scen4 Remarks
Technological demonstrator for
enhanced situational awareness in
military operations in a maritime
environment
Unmanned platform
Ability to be launched and recovered from R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
manned platforms
Autonomous Guidance, Navigation and R-UE/EU-R C-UE/EU-C C-UE/EU-C R-UE/EU-R R-UE/EU-R
Control (including collision avoidance and
decision making)
Self-Protection and electronic warfare R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
(incl. NAVWAR5)
4
Incidents/Scenarios
5
Navigation Warfare
6
PADR SCG V3.0 – 14 March 2019
Secure data links for command and R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
control
Low-observability R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
Mission Payload
On-board sensors C-UE/EU-C C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
On-board data processing and decision UNCL C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
making
Anti-mine warfare C-UE/EU-C C-UE/EU-C S-UE/EU-S C-UE/EU-C C-UE/EU-C
Anti-submarine warfare C-UE/EU-C S-UE/EU-S S-UE/EU-S S-UE/EU-S S-UE/EU-S
Anti-air warfare capability R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
Anti-jamming and anti-spoofing R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
protection
Detectors performance (incl. optical, R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
radar, IR signatures)
Global system integration
Multi systems EMC management R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
Secure high-speed mission data R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
exchange
Global data processing within C4ISTAR R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
(including data fusion and decision
making)
Information Security management R-UE/EU-R C-UE/EU-C S-UE/EU-S C-UE/EU-C R-UE/EU-R
7
PADR SCG V3.0 – 14 March 2019
Protection against cyber attacks R-UE/EU-R S-UE/EU-S C-UE/EU-C C-UE/EU-C R-UE/EU-R
Cooperation between heterogeneous R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
vehicles (including swarming)
Force protection and advanced
soldier systems beyond current
programmes
Generic open soldier systems UNCL R-UE/EU-R C-UE/EU-C R-UE/EU-R R-UE/EU-R
architecture
Tailor-made blast and ballistic
protection of military personnel
CBRN aspects R-UE/EU-R R-UE/EU-R C-UE/EU-C R-UE/EU-R R-UE/EU-R
Adaptive camouflage
Signatures UNCL C-UE/EU-C R-UE/EU-R C-UE/EU-C R-UE/EU-R
Strategic Technology Foresight
Short-medium term UNCL R-UE/EU-R UNCL UNCL UNCL
Long term UNCL UNCL UNCL UNCL UNCL
Recommendations/Key Conclusions UNCL UNCL R-UE/EU-R R-UE/EU-R UNCL
Mapping of non-EU sourced components UNCL R-UE/EU-R UNCL R-UE/EU-R UNCL
subject to export restrictions
8
PADR SCG V3.0 – 14 March 2019
Criticality analysis R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
European high-performance,
trustable (re)configurable system-
on-a-chip or system-in-package for
defence applications
Hardware R-UE/EU-R C-UE/EU-C R-UE/EU-R R-UE/EU-R R-UE/EU-R
Software R-UE/EU-R C-UE/EU-C R-UE/EU-R R-UE/EU-R R-UE/EU-R
Encryption R-UE/EU-R S-UE/EU-S S-UE/EU-S C-UE/EU-C R-UE/EU-R
Design R-UE/EU-R C-UE/EU-C R-UE/EU-R R-UE/EU-R R-UE/EU-R
Manufacturing UNCL R-UE/EU-R UNCL UNCL UNCL
Anti-tampering R-UE/EU-R S-UE/EU-S S-UE/EU-S C-UE/EU-C R-UE/EU-R
High power laser effector
R&D assessment R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
Technology roadmap R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
9
PADR SCG V3.0 – 14 March 2019
Measurements aspects R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
Requirements for the overall laser system R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
Concepts of employment and use R-UE/EU-R S-UE/EU-S S-UE/EU-S S-UE/EU-S R-UE/EU-R
Criticality Mapping R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
R&T activities R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
Key Performance Indicators UNCL R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
Combined radar, communications,
and electronic warfare AESA system
R&D assessment R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
Technology roadmap R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
System definition R-UE/EU-R C-UE/EU-C S-UE/EU-S S-UE/EU-S R-UE/EU-R
Architecture R-UE/EU-R R-UE/EU-R S-UE/EU-S S-UE/EU-S R-UE/EU-R
Functional specification R-UE/EU-R C-UE/EU-C S-UE/EU-S S-UE/EU-S R-UE/EU-R
Criticality Mapping(CM)
10
PADR SCG V3.0 – 14 March 2019
CM: Materials and components R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
CM: R&D capacity R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
CM: Industrial capacity R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
Concepts of employment and use R-UE/EU-R S-UE/EU-S S-UE/EU-S S-UE/EU-S R-UE/EU-R
R&T activities (RT)
RT system: antenna array R-UE/EU-R C-UE/EU-C S-UE/EU-S S-UE/EU-S R-UE/EU-R
RT system: beamforming R-UE/EU-R C-UE/EU-C S-UE/EU-S S-UE/EU-S R-UE/EU-R
RT system: resource manager R-UE/EU-R C-UE/EU-C C-UE/EU-C C-UE/EU-C R-UE/EU-R
RT system: key performance indicators R-UE/EU-R R-UE/EU-R S-UE/EU-S R-UE/EU-R R-UE/EU-R
RT system: measurement methodology R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
RT components: design R-UE/EU-R R-UE/EU-R C-UE/EU-C C-UE/EU-C R-UE/EU-R
RT components: fabrication R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
RT components: key performance R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
indicators
RT components: measurement UNCL UNCL UNCL UNCL UNCL
methodology
11
PADR SCG V3.0 – 14 March 2019
Future Disruptive Defence
Technologies (FDDT)
FDDT OPEN R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
FDDT EMERGING: Positioning, Navigation R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
and Timing
FDDT EMERGING: Artificial Intelligence R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
FDDT EMERGING: Quantum technologies R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
FDDT EMERGING: Long-range effects R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
FDDT EMERGING: Augmenting soldier R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R R-UE/EU-R
capacity
Interoperability standards for UNCL UNCL UNCL UNCL UNCL
military unmanned systems
12
