Ronny Hauser

The Classified Contract Solutions Beratungsgesellschaft mbH is a consulting, training and education company. The company's services focus on public and private entities handling national, EU, NATO and ESA Classified Information through classified contracts or employing staff holding a Personnel Security Clearance. Classified Contract Solutions advises a NATO agency handling its Classified Information and the related registry processes. The consultancy also advises a privileged NATO partner (7 NNN) to negotiate the Administrative Arrangements with the NATO Office of Security to implement the corresponding Security Agreement between the two entities. Based on first-hand experience representing enforcement authorities and drafting legislations and policies, Classified Contract Solutions provides training courses and helps authorities and industrial entities prepare for - and conduct security inspections and network vulnerability assessments.  

My task was to coordinate the development, review and amendment of the NATO security policy, its supporting Directives and the corresponding implementing Guidelines. In this capacity, I acted as the Secretary of the Security Committee. Those tasks require a firm understanding of our Alliance, its policies and procedures and the decision processes. In my role as security policy coordinator, I provided advice and guidance to all NATO components and partner nations on all security-related matters. A profound understanding of the legal nature of the respective entities, the applicable provisions and diplomatic skills are essential for the successful cooperation in this area. I also conducted inspections in NATO Nations and civil and military bodies as well as surveys in non-NATO Nations and International Organizations (NNN/IO). Through my work as the secretary for the NATO Security Committee and its related Security Policy Format, I became an expert in the application of the NATO Security Policy and acquired a very good understanding of the policy development and consultative processes in NATO. In that context, I worked closely with NSAs, DSAs and private entities that have classified contracts with the Organization or with one or more of the NATO components. Due to my legal qualification, I was nominated to be the coordinator for the investigation of security breaches in the Head Quarters and coordinating the NOS activities for all reportable security incidents.

I supported and represented the Secretariat General of the Council in security-related issues regarding the EU space programmes, in particular Galileo, EGNOS, COPERNICUS and GOVSATCOM. I also supported the approval process for cryptographic products in accordance with the Council's security rules and I drafted and reviewed EU security and space policies as well as their supporting guidelines for the protection of EU information, including EU classified information. In this function, I gained an additional understanding of the aspects of Foreign Direct Investment (FDI) and the related impacts on the security and availability of infrastructure as well as CIS for all aspects of the public administration including, information management, communication (classified and public), global navigation and network synchronization as well as Critical National and Critical European Infrastructure. Furthermore, I conducted official security assessment visits to EU Member States, third countries and international organisations, carried out to ensure the protection of EU classified information. Finally, I liaised with the relevant stakeholders and authorities of the EU Member States, third states and international organizations on security, risk management and accreditation of Communication and Information Systems and for the new Space Regulation of the European Union. The involved stakeholders have been the European institutions, the EU Member States and the EEA participants.

I had the honour and privilege to act as the Information Assurance Authority (IAA) for the EU GNSS Programmes. In that role, I supervised the security aspects of the ground and space segment of the related systems, including three satellite launch operations. The infrastructure established through these Space Programmes is Critical National Infrastructure in all EU Member States and will become EU Critical Infrastructure with the next revision of the related Directive. As IAA, I represented the EU Commission in the Security Accreditation board for the EU GNSS Programmes, provided legal and security advice to the Commission for the negotiations with third States. I advised the EU institutions on all the security-related aspects, with a focus on the protection of classified information and items in the negotiations for leave agreement with the UK. Furthermore, I worked on the drafting of the Space and Security Policies of the EU. In addition, I acted as the Crypto Authority for the EU GNSS Programmes where I implemented and supervised the EU GNSS Crypto Distribution Authority. These tasks required close coordination with the National administration for space and security in the EU Member States, with the Partner Nations authorities as well as with ESA and other relevant International Organizations. The following aspects have been part of tasks for the concerned systems and stakeholders: FDI, supply chain security, continuity of government, information and intelligence on the uncontrolled movement of people, resilient energy supply, civilian transportation systems and civil communication systems together with the elements on crisis management. Policy drafting and policy implementation have been equally important in my position.

The Federal Office for Goods Transport (BAG) is the authority designated to ensure an efficient transport infrastructure and appropriate transport capacity for bringing supplies to the population, the economy and the armed forces in times of crisis and emergencies. This includes the management and operation of transport assets, infrastructure and the corresponding required CIS. The ‘Civil Emergency Precautions Unit’ in the BAG is responsible for steering and supervising the corresponding branch offices and ensuring direct contact with the regional authorities and the transport entities of interest. To fulfil these tasks, I cooperated closely with other Federal authorities, the armed forces, state authorities responsible for disaster prevention and transport companies. My tasks included regular exercises, inspections and participation in national policy drafting commissions, as well as training and education for all involved colleagues. I also gained experience managing dangerous goods class VI and class VII. In that context, I qualified for the radiation safety officer function for my agency. I acquired detailed knowledge on the effects, handling, storing, transport preparation and detection of - as well as the protection against contaminations with - toxic and infectious substances and radioactive substances. This specific expertise was needed, and served well, during the Fukushima crisis in 2011, where I represented the BAG in the dedicated crisis unit of the Federal Government. There I gained first-hand experience in managing a crisis of global dimensions. I also participated in the Federal Rules and Regulation Committee for the re-organization of Civil Preparedness for all levels of the administration. In addition, I represented the DoT for the planning, regulation and implementation of the end-to-end encrypted terrestrial, digital communication system for agencies and organizations with security tasks.

I support the Council Security Committee and its Sub-Committee dedicated to information assurance matters. I am involved in the development, review and/or update

of information assurance policies and supporting guidelines for the protection of EU and GSC information, including EU classified information. Furthermore, I provide in-depth advice on information security and take an active part in the application of information security objectives (confidentiality, integrity, availability, authenticity and non-repudiation).

My tasks include, among others, communication and participation in meetings with Member States, as well as coordination of security accreditation activities with other parts of the GSC, the European Commission, and other EU institutions, Agencies, or bodies, as well as Member States. I provide the EUCI briefings for all GSC staff, and I am part of the team inspecting the Member States' compliance with the provisions governing the protection of EU Classified Information.