Annexes to COM(2013)777 - Progress report on the development of the second generation Schengen information system (SIS II), January 2013 - May 2013

Please note

This page contains a limited version of this dossier in the EU Monitor.

agreements with host Member States, the support of the Commission provided to eu-LISA during its establishment phase has gradually decreased in this reporting period and the working relations between the two will be governed by two Memoranda of Understanding (i.e. on operational working arrangements still to be signed and on financial transfers signed on 17 May 2013).

2.3. Project management

2.3.1. Global Programme Management Board (GPMB)

The GPMB has fulfilled its mandate and focused in particular on the remaining test re-runs and the migration phase.

There were seventeen GPMB plenary meetings during this period and the very last meeting took place on 7 May 2013 . With the exiry of the migration instruments,  the GPMB ceased to exist.

2.3.2. SIS-VIS Committee (SIS II)

Several key documents on migration and testing were approved at the five meetings of the SIS-VIS Committee on SIS II technical matters in the period January – May 2013. Detailed issues arising from specific project deliverables such change requests and migration have been further handled by dedicated sub-groups – the Change Management Board and the Migration Expert Group which met three and 17 times respectively.

2.3.3. National planning and coordination

The last meeting of the Member States' national project managers (NPM), organised regularly by the Commission to allow the detailed exchange of information on all activities with relevance to the global project status, took place on 30 May 2013. Meeting five times in this this reporting period, it dealt again in particular with the global schedule, testing, migration, the transition to the SIS II, the SIS II operational handbook and the SIS II Task Force reports.

2.3.4. Council

With a focus on the remaining technical and legal tasks linked to the final period before the SIS II go-live, the Commission continued to keep all relevant Council bodies informed about the SIS II state of play, including the timetable and budgetary aspects. All issues regarding the migration and switch-over phase in particular have been clarified at preparatory levels. As mentioned before, all legally binding preconditions for the decision of the Council on the date of the entry of SIS II into operation were met on time. This thorough preparatory work resulted in the said decision taken by the first JHA Council held under the Irish presidency of the Council on 7 March 2013 which unanimously adopted the two Decisions on the entry of the SIS II into operation on 9 April 2013 (one for each ex-pillar)[10]. The SIS II go-live has been accompanied by the information campaign as described below in section 3.3.6.

The Commission continued to circulate a weekly flash report to colleagues involved in the project at national level until the end of the intensive monitoring period/hand-over to eu-LISA summarising technical developments.

2.3.5. The European Parliament

The European Parliament continued to be supportive of the SIS II. In a spirit of transparency and loyal inter-institutional cooperation, the Commission has kept the European Parliament fully informed on the whole range of aspects of SIS II development until the very end of the project – two letters (on the successful accomplishment of the comprehensive test and the hand-over of the SIS II to eu-LISA) were sent by the Commission to the LIBE Committee. In addition, a presentation of the state of play was provided to the LIBE Committee by the Commission at the hearing on 21 March 2013, i.e. shortly before SIS II has entered into operation.

2.3.6. SIS II information campaign

In accordance with the SIS II legal basis, to accompany the entry into operation of SIS II, the Commission organised, in cooperation with the national data protection authorities and the European Data Protection Supervisor, an information campaign informing the public about its objectives, the data stored, the authorities having access and the rights of persons.[11]

Under the framework contract for the main deliverables concluded at the end of 2012, the leaflet, poster and a short video animation were finalised and provided by the Commission to Member States' designated authorities for further dissemination at national level (at border crossings, police stations, consulates etc.). The information campaign shall be repeated regularly.

2.3.7. Risk management

The Commission closely monitored the risks in the SIS II project with the support of its quality assurance contractor and followed up on them on a weekly basis in the framework of the well-established procedure, involving also on monthly basis the Global Programme Management Board. 

In this reporting period, the COM had to concentrate on the following risks:

· the readiness of the Member States (end-user applications) and notably the timely implementation of "Plan B" in Finland;

· the limited time remaining for contingency in the migration schedule.

3. Future priorities

Following the SIS II entry into operation, the core priority is to keep it fully operational, in particular by:

· ensuring the necessary infrastructure for the system and its operation,

· allowing the evolution of the national components in line with the evolutions agreed for the central system,

· treating the SIRENE offices as a high priority, both in terms of adequate staffing and appropriate technical support,

· putting in place a full disaster recovery/business continuity plan,

· ensuring the resilience of the SIS II to potential security breaches.

4. Conclusion

The Schengen Information System is at the heart of Schengen cooperation. Being a state-of-the-art IT system offering many enhanced functionalities as well as new data categories compared to its predecessor, SIS II is a key tool for the functioning of the Schengen area in terms of security and free movement of persons.

It therefore has represented a flagship project for the Commission since its very start.

The overall development of the SIS II was undeniably very demanding. Building such  complex system whilst meeting the high expectations of its users and satisfying evolving  requirements proved to be both technically and politically very challenging and consequently more time-consuming that initially foreseen.

In 2009 a major evaluation exercise took place. As a result, in 2010 an enhanced management structure, upgraded technical specifications, a new roadmap as well as a revised budgetary framework for the completion of the project were all put in place. Despite various challenges the SIS II project remained henceforth on track both time-wise and budget-wise. The successful performance of the two Milestone tests confirmed the robustness and performance of the Central System as well as the underlying key architectural and technical choices. This was then followed by the final phases of testing and the actual migration of data from SIS 1 to SIS II, all of which were completed successfully.

Accordingly, thanks to a renewed commitment of all stakeholders towards the finalisation of the project, the SIS II was accomplished in this reporting period and entered into operation on 9 April as determined by the JHA Council in March 2013. The SIS II has since been functioning smoothly.

Finally, the lessons learned in the SIS II project will serve as a valuable experience for the development of the new relevant large-scale IT systems in the field, notably the Entry/Exit System and the Registered Traveller Programme foreseen under the Smart Borders initiative.

Budget execution

|| From 2002 to June 2013 || From January to June 2013

(EUR) Commitments || Payments || Commitments || Payments

Development  HP/Steria) || 85 882 789 || 73 566 165 || 35 121 || 2 773 328

Development (Atos) || 3 921 248 || 3 548 261 || 0 || 247 219

Support & quality assurance || 16 063 293 || 13 612 454 || 210 379 || 1 000 068

Network || 45 335 129 || 32 154 296 || 0 || 1 778 679

Operational management preparation || 12 986 242 || 9 376 235 || 0 || 66 901

Security || 1 358 310 || 386 914 || 0 || 0

Studies / Consultancy || 1 086 628 || 985 020 || 22 217 || 21 813

Information Campaign || 183 943 || 108 846 || 0 || 75 473

Experts Mission Expenses || 4 867 236 || 2 814 072 || 3 482 456 || 2 231 362

Others || 14 874 || 14 874 || 0 || 0

TOTAL: || 171 699 692 || 136 567 137 || 4 067 173 || 8 194 842

SIS-VIS Committee (SIS II) and Working Group Meetings

a) Meetings held during this reporting period

JANUARY 2013

9, 16, 23, 30 ||  SIS II Global Programme Management Board

24 || SIS-VIS Committee (SIS II Technical Formation Meeting)

24 || SIS II National Project Managers' Meeting

10, 17, 25, 31 || SIS II MEG meeting

29 || SIS II CMB meeting

FEBRUARY 2013

5, 13, 21, 27 || SIS II Global Programme Management Board

26 || SIS-VIS Committee (SIS II Technical Formation Meeting)

26 || SIS II National Project Managers' Meeting

7, 14, 21, 28 || SIS II MEG meeting

6 || SIS II CMB meeting

MARCH 2013

5, 14 , 20 , 26 || SIS II Global Programme Management Board

22 || SIS-VIS Committee (SIS II Technical Formation Meeting)

22 || SIS II National Project Managers' Meeting

7 , 14 , 21 || SIS II MEG meeting

21 || SIS II CMB meeting

APRIL 2013

3, 17 , 25 || SIS II Global Programme Management Board

26 || SIS-VIS Committee (SIS II Technical Formation Meeting)

26 || SIS II National Project Managers' Meeting

4 , 11, 18 , 25 ||  SIS II MEG meeting

MAY 2013

2 , 7 || SIS II Global Programme Management Board

30 || SIS-VIS Committee (SIS II Technical Formation Meeting)

30 || SIS II National Project Managers' Meeting

2, 16 ||  SIS II MEG meeting

[1]              Council Regulation (EC) No 1104/2008 of 24 October 2008 on migration from the Schengen Information System (SIS 1+) to the second generation Schengen Information System (SIS II) (OJ L 299, 8.11.2008, p. 1).

[2]              Council Decision 2008/839/JHA of 24 October 2008 on migration from the Schengen Information System (SIS 1+) to the second generation Schengen Information System (SIS II) (OJ L 299, 8.11.2008, p. 43).

[3]              Article 55(3)(c) of Regulation (EC) 1987/2006 of the European Parliament and the Council on the establishment, operation and use of the second generation Schengen Information System (SIS II) (OJ L 381/4, 28.12.2006) and Article 71(3)(c) of Council Decision 2007/533/JHA of 12 June 2007 on the establishment, operation and use of the second generation Schengen Information System (SIS II) (OJ L 205/63, 7.8.2007).

[4]              SIRENE — Supplementary Information Request at the National Entries

[5]              (OJ L 71/1, 14.3. 2013) (OJ L 359/32, 29.12. 2012)

[6]              Common Article 15 of Regulation (EC) No 1987/2006 (OJ L 381, 28.12.2006) and of Council Decision 2007/533/JHA (OJ L 205, 7.8.2007).

[7]              Regulation (EU) No 1077/2011 of the European Parliament and of the Council of 25 October 2011establishing a European Agency for the operational management of large-scale IT systems in the area of freedom, security and justice (OJ L 286/1,1.11.2011)

[8]              Article 12(1)(y) of Regulation (EU) No 1077/2011 of the European Parliament and of the Council of 25 October 2011establishing a European Agency for the operational management of large-scale IT systems in the area of freedom, security and justice (OJ L 286/1,1.11.2011)

[9]              OJ C 103, 9.04.2013, p. 1

[10]             Council Decision of 7 March 2013 fixing the date of application of Regulation 1987/2006 JHA on the establishment, operation and use of the second generation Schengen Information System (SIS II) (OJ L87/10, 27.3.2013) and Council Decision of 7 March 2013 fixing the date of application of Decision 2007/533/JHA on the establishment, operation and use of the second generation Schengen Information System (SIS II) (OJ L87/8, 27.3.2013)

[11]             Common Article 19 of Regulation (EC) No 1987/2006 (OJ L 381, 28.12.2006) and of Council Decision 2007/533/JHA (OJ L 205, 7.8.2007).