Spain’s updated National Security Framework (Esquema Nacional de Seguridad, ENS), set out in Royal Decree 311/2022, comes into force today, replacing the framework first introduced in 2010.
Key points
- Mandatory security framework for public sector systems.
- Security categories of basic, medium and high.
- Certification applies to public sector systems and private ICT suppliers.
- Updates the 2010 framework to reflect current threats.
UK suppliers of ICT and cloud services to the Spanish public sector will need to demonstrate ENS conformity, typically through certification, and should plan for the transition period allowed for existing systems.
Source: Real Decreto 311/2022 (BOE)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
