Esquema Nacional de Seguridad (ENS), Spain
Spain's national security framework for public bodies and their private suppliers, with a conformity process (adaptation, implementation, audit, certification) and a public register of certified entities.
- 2requirementsin our own words
- 0editions none dated yet
- 1places where it is a duty of 30 assessed
- 18 Oct 2026last checkedat the sources below
Where it applies
It is a duty in 1 of 30 places. The outcome holds under the conditions shown and says nothing about any one site.
| Where | Outcome | Basis | Conditions | Authority and route |
|---|---|---|---|---|
| Spain | Applies | Required by law In force | None stated National scheme used by public bodies and their suppliers in this country. | Centro Criptológico Nacional (CCN), Spain |
| Austria, Belgium, Bulgaria, Switzerland, Cyprus, Czechia, Germany, Denmark, Estonia, Finland, France, United Kingdom, Greece, Croatia, Hungary, Ireland, Italy, Lithuania, Luxembourg, Latvia, Malta, Netherlands, Norway, Poland, Portugal, Romania, Sweden, Slovenia, Slovakia | Does not apply | Voluntary In force | None stated National scheme of ES. | Not stated |
What it asks for
2 requirements, each in our own words with the evidence an assessor would expect and who on a site usually owns it. Read the clause itself on the scheme owner's page.
| Requirement | Evidence expected | Owner | When |
|---|---|---|---|
| Categorise the information system and choose the applicable security level. | Categorisation record Record, checked by document review | Security lead | On each change Governance, a system or service |
| Go through adaptation, implementation, audit and certification by a listed entity. | Certificate and audit report Certificate, checked by document review | Compliance manager | Each certification cycle Management system, a system or service |
About the programme
- Scheme owner
- Centro Criptológico Nacional (CCN), Spain
- Assessed by
- An accredited certification body
- Scope
- information system
- Levels
- levels set in the national scheme
- Validity
- Not read.
- Accreditation route
- Certification entities listed by the CCN
- Who asks for it
- Public tenders, Regulator
- Where it is used
- ES
Related programmes
Sources
Official bodies behind this page, each with the date we last read it.
No official body publishes a page for this scheme. The scheme owner's own page, linked under About the programme, is where the clauses are published.
Not legal advice. Confirm each duty against the text itself.