EUROPEAN EXTERNAL ACTION SERVICE

PROCEDURE
NoEEAS-586-DIVIBS7-SER/SUP-FWC

EEAS Classified Document Management System(CDMS)

and e-Registry for

EC³IS (EEAS Corporate Classified

Communication and Information System)

Questions and Answers Set 15

Question 1

In “Annex_1_Technical compliance and requirement List_CDMS & e-Registry”, Section 9.1.10 Downgrading, Declassification and Destruction Cycle - Material Copy Return Management, p. 38, we read: “(9) The solution shall provide a QR-Code reader and QR-Code recognition function to scan a printed data by the solution to ease the paper copy tracing and management by the RCO roles. [Priority 2]. (10) QR-Code reader devices shall be TEMPEST protected and use the strictest level of protection: EU IASG 04-03 level A (NATO SDIP-27 Level A). [Priority 2]"

and

Answer to question 9 of questions and answers set 9: “At the beginning, 70 QR-Code reader devices have to be provided for the production and 5 for the pre-production (a line has to be defined in the Annex A table B.1 and B.2.).

The QR-Code reader devices have to be connected on TEMPEST-filtered USB (D9) port.”

Questions:

a) Does the requirement that “The QR-Code reader devices have to be connected on TEMPEST-filtered USB (D9) port” in your response to answer 9 is the only requirement satisfying that “QR-Code reader devices shall be TEMPEST protected”? Or is it an additional requirement?

b) In order to provide a price for the QR-code reader, we need further details as to the related requirements, for example the mil density, required print contrast, megapixels of the sensor, any physical dimensions constraints (size, weight), operation mode (handheld / desktop), etc. Can you provide such details?

Answer to question 1

a) "The QR-Code reader devices shall be TEMPEST protected and use the strictest level of protection: EU IASG 04-03 level A (NATO SDIP-27 Level A), it has to be connected on the TEMPEST-filtered USB (D9) port to the EC³IS Client (provided by EEAS)" is the completed requirement.

b) The QR-Code reader devices has to be used with the provided solution and be able to correctly read the QR-Code printed by the MultiFunctional Print devices (Annex 1 chapter 13.4.2) MP C3004SP.

CDMS & e-Registry for EC³IS 2/2 Questions & Answers