Home · What is the ENS
National Security Scheme
The ENS for suppliers to the Spanish public administration
Spain's National Security Scheme (ENS) is the set of security rules that the public administration applies to its information systems. It is governed by Royal Decree 311/2022 and is usually required in the specifications of public tenders.
Sources: Royal Decree 311/2022 (BOE) · National Cryptologic Centre (CCN)
-
Who it applies to
To companies that, under contract, provide services or technology solutions to the public administration, in the systems they use to deliver that service, and to their suppliers when the contract requires it.
-
How compliance is demonstrated
It depends on the category of the system. In the basic category, a self-assessment and a Declaration of Conformity are enough. In the medium and high categories, an audit by an accredited certification body is required.
-
Where NISPLY GRC fits in
The ENS alignment is handled by a consultancy or implementation firm, and the audit by an accredited body. NISPLY GRC is the application both use to do that work: category, Statement of Applicability, evidence, review and reports. NISPLY does not carry out ENS alignments for companies, nor does it issue certifications. Learn about NISPLY GRC.
Which companies have to comply with the ENS?
Those that work for the public sector, by providing services or selling technology to a public body. If the tender or contract asks for the ENS Declaration or Certification of Conformity, it applies to you.
Does NISPLY certify the ENS or do ENS alignments?
No. Only an accredited body can issue the certificate, and your consultancy does the alignment. NISPLY builds the app they work with.
Does NISPLY only work with the ENS?
No. The ENS is what NISPLY GRC handles. It is our app for consultancies and auditors. With NISPLY Consulting, we also help small businesses use artificial intelligence and keep themselves safe.
Contact
Book a meeting
A 30-minute video call to hear about your case. You pick a day and time, and we confirm the meeting by email.
- 30 minutes
- Video call on Google Meet
- No obligation to hire us
1Day and time
Loading available times…
Mainland Spain time. Only free times are shown.
Request received
We will review your request and confirm the meeting by email.