Article 27 4.

If required for the performance of ENISA’s tasks, the Management Board shall decide to allow ENISA to handle classified information. In that case ENISA, in agreement with the Commission services, shall adopt security rules applying the security principles set out in Commission Decisions (EU, Euratom) 2015/443 ( 4 ) and 2015/444 ( 5 ). Those security rules shall include provisions for the exchange, processing and storage of classified information.