The Directorate-General for Informatics shall be notified of any exceptions to the it security policy.
The ISSB shall recommend the Commission's it security policy for adoption by the Commission.
