CEN/TC 263 - Secure storage of cash, valuables and data media

This document specifies requirements and tests methods for deposit systems, and classifies the systems according to their burglary resistance and their resistance to the theft of deposits.
This document comprises two types of deposit system:
—   Night safes which provide depositing services for the customers of financial institutions without giving access to the content of the night safe.
—   Deposit safes which enable the personnel of a company to place money or valuables in safe custody without giving access to the content of the deposit safe. The installation condition for deposit safe according to this document is that the depositing functions are installed inside the premises of the company and are only disposable for the personnel of the company.
NOTE   Parts of a deposit system are a receiving unit, an input unit and in some cases, a chute.
This document includes design requirements for deposit systems controlled by programmable controllers and for the software for these. Controller hardware testing is restricted to mechanical or electromechanical attacks of electric motors, sensors, coils and similar devices; but software testing as attempts to influence controller software or controller hardware is not part of this document.
Deposit systems can have devices for functions such as user identification and/or counting and registration of money. Tests of and requirements for classification of such functions are not included.
This document does not cover protection of persons using the deposit system or the prevention of fraud committed by operators of the deposit system.

This document establishes the basis for testing and classifying secure cabinets.
The standard covers products meant for purposes where the security resistance required is less than that measured by EN 1143-1. Normally these products are used in lower risk situations.

This document specifies requirements for high security locks (HSL) for reliability, resistance to burglary and manipulation with methods of testing. It also provides a scheme for classifying HSL in accordance with their assessed resistance to burglary and unauthorized opening.
It is applicable to mechanical and electronic HSL. For electronic locks used in a distributed system, see EN 17646 for further information.
The following features can be included as optional subjects but they are not mandatory:
a)   recognized code for preventing code altering and/or enabling/disabling parallel codes;
b)   recognized code for disabling time set up;
c)   integration of alarm components or functions;
d)   resistance to attacks with acids;
e)   resistance to X-rays;
f)   resistance to explosives;
g)   time functions.

This document provides recommendations and requirements for the procedures, processes and performance monitoring to be implemented for the management and control of the physical destruction of confidential and sensitive material to ensure that such material is disposed of securely and safely.
This document can be referenced by anyone who processes such material on behalf of others and covers the following scenarios:
-   on site - using mobile equipment at the location of use (destruction equipment is brought to the confidential or sensitive material);
-   off site - transport followed by destruction using equipment at a destruction facility (the confidential or sensitive material is brought to the destruction equipment, such as used at a dedicated external facility operated by a service provider);
-   use of equipment at the Data Controller’s location (confidential or sensitive material and destruction equipment co-located, such as a shredder in a building occupied by a client or clients).
Destruction by erasure (e.g. crypto erasure, data overwriting, degaussing or other forms of magnetic/electronic erasure) is not covered in this document.

This document is applicable to Distributed Systems (DS), i.e. high security locks with components which have a wired or wireless connection via a transmission system in order to execute fixed operating conditions using different individually fixed access possibilities.
Products which are to be tested on the basis of this document comply with the generally recognized state of the art at the time of testing. Due to the short innovation cycles in the field of electronic and, in particular, information technology applications, the technical possibilities available at the time of product development should also be taken into account during implementation.
Distributed systems can be used, for example, to operate high security locks of secure storage units (safes and strongrooms).
High security locks (HSL) are used in DS as locking unit.
This document does not apply for stand-alone HSL, which are not part of a distributed system. For these stand-alone HSL EN 1300 is applicable only.
The document will be revised with a frequency of 3 years as the research in the area of cryptography and relevant attacks evolve with high speed as well as the referenced standards.

This document specifies requirements for fire resisting data cabinets and diskette inserts.
Two methods of test are specified to determine the ability of fire resisting data cabinets to protect temperature and humidity sensitive contents from the effects of fire: a fire endurance test and a fire shock and impact test. Two levels of fire severity (S 60 and S 120) based upon time of fire exposure; and three protection classes (P, D and DIS) are specified using the maximum temperature increases and humidity values permitted within the storage space of the data cabinet.
Diskette inserts (DI 60 P/DIS and DI 120 P/DIS) are installed in data cabinets of protection class S 60 P or S 120 P, respectively, and subjected to a fire endurance test (see 5.1.2).
Requirements are also specified for test specimens, the technical documentation for the test specimen, correlation of the test specimen with the technical documentation, preparation for type testing and test procedures.
A scheme to classify the fire resisting data cabinets and diskette inserts from the test results is also given (see Table 1).
Diskette inserts are only installed in data cabinets having the same design as the series of protection class S 60 P and S 120 P, respectively, in which the insert has been tested in using methods defined in 5.1.2. Where several inserts are installed, they are built in one beside the other or one above the other from bottom to top, respectively. The volume and total height of the installed inserts do not exceed 50 % of the total internal volume or 50 % of the internal height, respectively, of the data cabinets into which they are installed. The dimensions of the insert can be adapted by increasing the width and depth to the corresponding dimensions of the data cabinets. A reduction of these dimensions as well as a change of the height is only admitted within the specified tolerance.
The temperature increases during type-tests on data cabinets and diskette inserts will be considered in deciding the permitted diskette insert installations. For a permitted installation, the temperature increase of the intended data cabinet ( ) does not exceed the temperature increase of the tested data cabinet ( ) in which the diskette insert has been type-tested by more than the difference between the maximum value for the diskette insert ( ) and the maximum admissible temperature increase (30 K), i.e   (See example in Annex B).
A description of the installation of the diskette inserts can be given in the technical documentation of the manufacturer.

This document specifies requirements for light fire storage units providing protection against fire.
The method of test is specified to determine the ability of light fire storage units to protect paper media from the effects of fire. Two levels of fire exposure periods (LFS 30 and LFS 60) are specified using the maximum temperature increase permitted within the storage space of the light fire storage unit.
Protection after the fire exposure of 30 min (LFS 30) or 60 min (LFS 60) is not ensured by this document, but by European Standard EN 1047-1. Requirements are also specified for the test specimen, the technical documentation for the test specimen, correlation of the test specimen with the technical documentation, preparation for type testing and test procedures.
A scheme to classify the light fire storage units from the test results is also given (see Table 1).

This European Standard establishes the basis for testing and classifying free-standing safes, built-in safes (floor and wall), ATM safes and ATM bases, strongroom doors and strongrooms (with or without a door) according to their burglary resistance. This European Standard does not cover testing and classifying Deposit Systems and ATM systems.

This part of the European Standard EN 1047 specifies requirements for data rooms and data containers. It includes a method of test for the determination of the ability of data rooms and data containers to protect temperature and humidity sensitive data media (see 3.5) and hardware systems (see 3.6) from the effects of fire. A test method for measuring the resistance to mechanical stress (impact test) provided by data rooms type B and data containers is also specified.
Requirements are also specified for test specimens, the technical documentation of the test specimens, materials specimens, physical fittings, the correlation of test specimens with the technical documentation and the preparation for type testing, as test procedures as well as the series production.
In addition, a scheme to classify data rooms and data containers from the test results is given (see Table 1).
As well as providing protection against fire, correctly installed data rooms and data containers offer a defined protection against impacts caused by failure during fire of components and objects external to the data room or data container.
Data rooms and data containers having the same design, protection and construction features (type and thickness of construction and protective materials, rebate geometry, lockings, doors, etc.) will only be given the same protection classification as that of the test specimen if the tolerances are within the ranges specified in Clause 7.
NOTE   This European Standard does not regulate the use of data rooms in the meaning of the building laws of the respective countries. In the construction of data rooms, it is advised to consider the respective national requirements.

This document establishes the basis for testing and classifying secure safe cabinets.
The standard covers products meant for purposes where the security resistance required is less than that measured by EN 1143-1. Normally these products are used in lower risk situations.

Data rooms and data containers are fire protection security products whose purpose is to protect temperature and humidity sensitive data media and hardware systems from the effects of fire. These fire resistance products do not provide any defined protection against burglary.
Based on these objectives, the CEN/TC 263 Working Group WG2 Fire Resistance unanimously noted at its meeting on 8 March 2012 that the requirement for a certified high security lock according to EN 1300 for data rooms and data containers suggests protection that is not provided and does not reflect the requirements of the market.
For the reasons explained above, WG2 unanimously recommended deletion of the requirements for a certified high security lock according to EN 1300 without replacement from EN 1047-2:2009. In the interest of the market, this change in this European Standard shall be implemented very soon via an Amendment to EN 1047-2:2009. The necessary decision shall be taken in a 3 months shortened UAP. The necessary application shall be filed with the CEN/TC 263 via DIN.
The draft for Amendment A1 to EN 1047-2:2009 shall be presented to the CEN/TC 263 together with the application for changes in this European Standard.

This European Standard specifies requirements and tests methods for deposit systems, and classifies the systems according to their burglary resistance and their resistance to the theft of deposits.
This European Standard comprises two types of deposit system:
-   Night safes which provide depositing services for the customers of financial institutions without giving access to the content of the night safe.
-   Deposit safes which enable the personnel of a company to place money or valuables in safe custody without giving access to the content of the deposit safe. The installation condition for deposit safe according to this European Standard is that the depositing functions are installed inside the premises of the company and are only disposable for the personnel of the company.
NOTE   Parts of a deposit system are a receiving unit, an input unit and in some cases, a chute.
This European Standard includes design requirements for deposit systems controlled by programmable controllers and for the software for these. Controller hardware testing is restricted to mechanical or electromechanical attacks of electric motors, sensors, coils and similar devices; but software testing as attempts to influence controller software or controller hardware is not part of this standard.
Deposit systems may have devices for functions such as user identification and/or counting and registration of money. Tests of and requirements for classification of such functions are not included.
This European Standard does not cover protection of persons using the deposit system or the prevention of fraud committed by operators of the deposit system.

This document establishes the basis for testing and classifying secure safe cabinets.
The standard covers products meant for purposes where the security resistance required is less than that measured by EN 1143-1. Normally these products are used in lower risk situations.

This European Standard specifies requirements for high security locks (HSL) for reliability, resistance to burglary and unauthorized opening with methods of testing. It also provides a scheme for classifying HSL in accordance with their assessed resistance to burglary and unauthorized opening.
It applies to mechanical and electronic HSL. The following features may be included as optional subjects but they are not mandatory:
a)   recognized code for preventing code altering and/or enabling/disabling parallel codes;
b)   recognized code for disabling time set up;
c)   integration of alarm components or functions;
d)   remote control duties;
e)   resistance to attacks with acids;
f)   resistance to X-rays;
g)   resistance to explosives;
h)   time functions.

This European Standard gives recommendations for the management and control of confidential material destruction, to ensure that such material is disposed of securely and safely. The recommendations apply to a company’s main business premises and any holding sites.

This part of this European Standard specifies requirements for fire resisting data cabinets and diskette inserts.
Two methods of test are specified to determine the ability of fire resisting data cabinets to protect temperature and humidity sensitive contents from the effects of fire: a fire endurance test and a fire shock and impact test. Two levels of fire severity (S 60 and S 120) based upon time of fire exposure; and three protection classes (P, D and DIS) are specified using the maximum temperature increases and humidity values permitted within the storage space of the data cabinet.
Diskette inserts (DI 60 P/DIS and DI 120 P/DIS) are installed in data cabinets of protection class S 60 P or S 120 P, respectively, and subjected to a fire endurance test (see 5.1.2).
Requirements are also specified for test specimens, the technical documentation for the test specimen, correlation of the test specimen with the technical documentation, preparation for type testing and test procedures.
A scheme to classify the fire resisting data cabinets and diskette inserts from the test results is also given (see Table 1).
Cabinets having the same design, protection and construction features (type and thickness of construction and protective materials, rebate geometry, locking, etc.) will only give the same fire protection classification as that of a test specimen if they are of similar internal dimensions. The maximum difference in internal dimensions (height, width and depth of the storage space, measured from wall to wall) to which the test classification could apply is + 15 %. Cabinets having internal dimensions which differ by more than this amount from that of the tested specimen should be submitted to an extra test.
The wall, ceiling and door thicknesses should not be below the specified minimum limit of the type-tested thickness by more than 3 %. ...

This European Standard specifies requirements for light fire storage units providing protection against fire.
The method of test is specified to determine the ability of light fire storage units to protect paper media from the effects of fire. Two levels of fire exposure periods (LFS 30 P and LFS 60 P) are specified using the maximum temperature increase permitted within the storage space of the light fire storage unit.
Requirements are also specified for the test specimen, the technical documentation for the test specimen, correlation of the test specimen with the technical documentation, preparation for type testing and test procedures.
A scheme to classify the light fire storage units from the test results is also given (see Table 1).

This European Standard establishes the basis for testing and classifying free-standing safes, built-in safes (floor and wall), ATM safes and ATM bases, strongroom doors and strongrooms (with or without a door) according to their burglary resistance. This European Standard does not cover testing and classifying Deposit Systems and ATM systems.

This part of the European Standard EN 1047 specifies requirements for data rooms and data containers. It includes a method of test for the determination of the ability of data rooms and data containers to protect temperature and humidity sensitive data media (see 3.5) and hardware systems (see 3.6) from the effects of fire. A test method for measuring the resistance to mechanical stress (impact test) provided by data rooms type B and data containers is also specified.
Requirements are also specified for test specimens, the technical documentation of the test specimens, materials specimens, physical fittings, the correlation of test specimens with the technical documentation and the preparation for type testing as well as test procedures.
In addition, a scheme to classify data rooms and data containers from the test results is given (see Table 2).
As well as providing protection against fire, correctly installed data rooms and data containers offer protection against impacts caused by failure during fire of components and objects external to the data room or data container.
Data rooms and data containers having the same design, protection and construction features (type and thickness of construction and protective materials, rebate geometry, lockings, doors, etc.) will only be given the same protection classification as that of the test specimen if the tolerances are within the ranges specified in Table 1.
NOTE   This European Standard does not regulate the use of data rooms in the meaning of the building laws of the respective countries. In the construction of data rooms, the respective national requirements should be considered.

This European Standard specifies requirements for high security locks (HSL) for reliability, resistance to burglary and unauthorized opening with methods of testing. It also provides a scheme for classifying HSL in accordance with their assessed resistance to burglary and unauthorized opening.
It applies to mechanical and electronic HSL. The following features may be included as optional subjects but they are not mandatory:
a)   recognized code for preventing code altering and/or enabling/disabling parallel codes;
b)   recognized code for disabling time set up;
c)   integration of alarm components or functions;
d)   remote control duties;
e)   resistance to attacks with acids;
f)   resistance to X-rays;
g)   resistance to explosives;
h)   time functions.

This document establishes the basis for testing and classifying secure safe cabinets.

This European Standard specifies requirements and tests for deposit systems, and classifies the systems according to their burglary resistance and their resistance to the theft of deposits.
The standard includes design requirements for deposit systems controlled by programmable controllers.  In this European Standard, controller hardware testing is restricted to electric motors, sensors, coils and similar devices; software testing is not part of this standard.
Deposit systems may have devices for functions such as user identification and/or counting and registration of money. Tests and classification of such functions are not included in this European Standard.
This European Standard does not cover protection of persons using the deposit system or the prevention of fraud committed by operators of the system.

This European Standard specifies requirements for high security locks (HSL) for reliability, resistance to burglary and unauthorized opening with methods of testing. It also provides a scheme for classifying HSL in accordance with their assessed resistance to burglary and unauthorised opening.
It applies to mechanical and electronic HSL. The following features may be included as optional subjects but they are not mandatory:
1)   recognised code for preventing code altering and/or enabling/disabling parallel codes;
2)   recognised code for disabling time set up;
3)   integration of alarm components or functions;
4)   remote control duties;
5)   resistance to attacks with acids;
6)   resistance to X-rays;
7)   resistance to explosives;
8)   time functions.

This Part of the European Standard EN 1047 specifies requirements for data rooms and data containers. It includes a method of test for the determination of the ability of data rooms and data containers to protect temperature and humidity sensitive data media (see 3.5) and hardware systems (see 3.6) from the effects of fire. A test method for measuring the resistance to mechanical stress (impact test) provided by data rooms type B and data containers is also specified.
Requirements are also specified for test specimens, the technical documentation of the test specimens, materials specimens, physical fittings, the correlation of test specimens with the technical documentation and the preparation for type testing as well as test procedures.
In addition, a scheme to classify data rooms and data containers from the test results is given (see Table 2).
As well as providing protection against fire, correctly installed data rooms and data containers offer protection against impacts caused by failure during fire of components and objects external to the data room or data container.
Data rooms and data containers having the same design, protection and construction features (type and thickness of construction and protective materials, rebate geometry, lockings, doors, etc.) will only be given the same protection classification as that of the test specimen if the tolerances are within the ranges specified in Table 1.
NOTE   This European Standard does not regulate the use of data rooms in the meaning of the building laws of the respective countries. In the construction of data rooms, the respective national requirements should be considered.

TC Modification to 4.4, 2nd paragraph and 7.5.5.3, 1st paragraph (concerning the mother text and not the amendment/consolidation text)

This European Standard establishes the basis for testing and classifying free-standing safes, built-in safes (floor and wall), ATM safes and ATM bases, strongroom doors and strongrooms (with or without a door) according to their burglary resistance. This European Standard does not cover testing and classifying Deposit Systems and ATM systems.

This European Standard specifies requirements for high security locks (HSL) for reliability, resistance to burglary and unauthorized opening with methods of testing. It also provides a scheme for classifying HSL in accordance with their assessed resistance to burglary and unauthorised opening.
It applies to mechanical and electronic HSL. The following features may be included as optional subjects but they are not mandatory:
1)   recognised code for preventing code altering and/or enabling/disabling parallel codes;
2)   recognised code for disabling time set up;
3)   integration of alarm components or functions;
4)   remote control duties;
5)   resistance to attacks with acids;
6)   resistance to X-rays;
7)   resistance to explosives;
8)   time functions.

This part of EN 1047 specifies requirements for fire-resisting data rooms and data containers. It includes a method of test for the determination of the ability of data rooms and data containers to protect temperature and humidity sensitive contents and associated hardware systems from the effects of fire outside the data room or data container. A test method for measuring the resistance to impact of data containers and some data rooms is also specified.

This European Standard establishes the basis for testing and classifying free-standing safes, built-in safes (floor and wall), ATM safes and ATM bases, strongroom doors and strongrooms (with or without a door) according to their burglary resistance. This European Standard does not cover testing and classifying Deposit Systems and ATM systems.

This part of this European Standard specifies requirements for fire resisting data cabinets. Two methods of test are specified to determine the ability of fire resisting data cabinets to protect temperature and humidity sensitive contents from the effects of fire: a fire endurance test and a fire shock and impact test.

UAP of 4 months (TC Res 24/2000) (CC/010209)

After "(floor and wall)", add "ATM safes and ATM bases".

This European standard specifies requirements for high security locks (HSL) for their  reliability, resistance to burglary and unauthorized opening together with methods of test.  It also gives a classification scheme for HSL according to their security.