The State Commission on Information Security (SCIS)

The State Commission on Information Security (SCIS) is a state authority which carries out the policy of the Republic of Bulgaria on the protection of classified information and is a first-level manager of budget funds.

The Commission is a collegiate body and is comprised of five Members including Chairperson and Deputy-Chairperson who are appointed by Decision of the Council of Ministers for the term of five years by a proposal of the Prime Minister. Members of the Commission can be only individuals who have university degree. The Commission is assisted by administration whose activities, structure and organization of work are determined by the Structural Regulations adopted by the Council of Ministers.

The State Commission on Information Security (SCIS) fulfils its activities as per the Classified Information Protection Act (CIPA) by:

• Organizing, fulfilling, coordinating and controlling the activity on the protection of classified information;
• Ensuring equal protection of the classified information;
• Fulfilling its activities in close co-operation with the authorities of the Ministry of Defence, the Ministry of Interior, the Ministry of Foreign Affairs and the Security and Public Order Services.

• In the fulfilment of its activities SCIS:
• Defines directions and approves action plans of Organizational Entities in case of danger of damage to state interests as consequence of unauthorized access to classified information;
• Conducts analysis and readiness evaluation on protection of the classified information and provides mandatory instructions in this field;
• Develops and submits for adoption by the Council of Ministers draft legislation in the field of the protection of classified information;
• Organizes and ensures the functioning of registries in the field of international relations;
• Organizes, exercises control and is responsible for the fulfilment of the obligations on the protection of classified information contained in international treaties to which the Republic of Bulgaria is a Party;
• Provides general guidance on the activities concerning the vetting procedures of individuals who require handling classified information and the issuance of personnel security clearance for the respective security classification level;
• Provides general guidance on the activities concerning the vetting procedures of individuals or legal entities who apply for signing a contract or fulfil a contract involving access to classified information and approves template of facility security clearance in accordance with this law;
• Conducts vetting procedure together with the security services and by their proposal issues security clearance to the individuals proposed for appointment as Information Security Officers;
• Conducts vetting procedure together with the security and public order services in the cases under Article 45a, Paragraph 3 and issues or denies issuing of security clearance;
• Issues certificates confirming before foreign authorities that Bulgarian individuals or legal entities possess personnel respectively facility security clearance;
• Conducts vetting procedure together with the security services of individuals who apply for positions or for fulfilling specifically assigned tasks requiring handling of classified information of other state or international organization after the competent authority of the respective state or international organization has submitted written request;
• Maintains unified registers of issued, revoked or invalidated personnel and facility security clearances, certificates and confirmations, denials or invalidations of such, as well as register of the materials and documents containing classified information which is state or official secret;
• In case of unauthorized access to classified information with security classification level of Top Secret informs immediately the Prime Minister;
• Organizes and coordinates the training on handling classified information;
• Exercises methodological guidance on the Information Security Officers;
• Exercises overall control over the protection of the classified information stored, processed and transmitted in automated information systems or networks;
• Issues visit authorizations to individuals for performing inspections held in accordance with international agreements on mutual protection of the classified information;
• Carries out activities with regard to receiving, storing, transmitting and delivery of documents and/or materials containing classified information;