
National Security Scheme (ENS)
ENS certification ensures the security and protection of information in public administrations, improving risk management and citizens' trust
For maximum protection of information systems
AENOR is the first entity to obtain ENAC accreditation under the new ENS according to RD 311/2022. At AENOR we have been supporting organisations that comply with the National Security Scheme since 2013, being leaders in this certification.
Granting of marks and certificates
The AENOR Certificate of conformity with the National Security Scheme complies with the requirements of ENS-ITS-Conformity with the ENS (BOE-A-2016-10109) and the CCN-STIC Guide 809-ENS-Declaration and Certification of Conformity ENS
Request informationWhat is the ENS?
The National Security Scheme is a Law that is mandatory for the General Government and providers of technological services to the Public Administrations, which generates the necessary conditions for confidence in the use of electronic means. To this end, it establishes a series of measures that guarantee the security of electronic systems, data, communications, and services, allowing the exercise of rights and the fulfillment of duties through these means.
The scheme establishes the security policy in the use of electronic means and is made up of basic principles and minimum requirements that allow adequate protection of information systems, services and their information.
The ENS is a scheme inspired by the ISO 27000 family of standards and, more specifically, by the ISO 27001, so its structure and application responds to the PDCA Cycle model - Continuous improvement, considering risk analysis and implementation of measures/controls.
What benefits does it bring to public and private organizations?
The main benefits of this certification for organizations are to have a managed and controlled system with measures/controls that ensure the correct protection of information systems against internal and external threats and incidents.
About the new version of ENS
-
Does the new version of the ENS require the certifying body to be accredited by ENAC?
Yes, and we are already accredited. To this end, a transition plan has been drawn up, which implies, among others, that our auditors are qualified and trained in the ENS 2022 and that is why AENOR is already in a position to carry out audits with the new version, being the first to do so under the new version of ENS
-
What is the deadline for adapting to the new National Security Scheme?
The transition period that has been defined in RD 311/2022 - ENS itself in its single transitional provision, is 24 months from the day following the date of publication (4 May 2022).
-
What is the adaptation plan defined for certification bodies?
In accordance with the transition plan established by the CCN in coordination with ENAC, for accrediting entities, our audits can now be operated under the new ENS (RD 311/2022), although the first certificates cannot be issued before December 1, 2022, following the criteria established by the owner of the scheme (CCN).
-
Which ENS can I be certified with from now on?
As AENOR is accredited for the new version of ENS, companies may be certified with both versions (RD 3/2010 or RD 311/2022), and it is advisable to do so with the latest version, since the official validity and validity of RD 3/2010 is only until 5 May 2024 (date subject to modification by the competent body).
-
I am currently certified with AENOR, which ENS can I be certified with from now on?
Companies that are currently in the process of certification (initial or renewal) will obtain certification with AENOR in accordance with RD 3/2010, with official validity and validity until 5 May 2024(*).
*(date subject to change by the competent body).
AENOR Magazine
Course: National Security Scheme
Sign up
