{"id":44184,"date":"2023-09-21T12:19:11","date_gmt":"2023-09-21T10:19:11","guid":{"rendered":"https:\/\/vintegris.com\/blog\/national-security-scheme-ens\/"},"modified":"2025-12-10T11:08:46","modified_gmt":"2025-12-10T10:08:46","slug":"national-security-scheme-ens","status":"publish","type":"post","link":"https:\/\/vintegris.com\/en\/blog\/national-security-scheme-ens\/","title":{"rendered":"National Security Scheme, ENS"},"content":{"rendered":"

National Security Scheme, ENS<\/h1>\n

Technology has been an integral part of our daily lives for several years now. Our extensive use of it, along with the relentless evolution of disruptive technologies, poses a significant challenge to cybersecurity. This growing societal dependence on technology has increased the risks and threats associated with its use, requiring responses adapted to constantly evolving needs. <\/span><\/p>\n

Challenges and threats<\/h2>\n

The challenges posed by technological dependence are the result of a number of interrelated factors, such as the evolution of cyber threats with the development of new techniques and tools to compromise the security of systems, networks, and data. This includes sophisticated malware, social engineering attacks, and advanced evasion techniques.<\/span> Furthermore, with the proliferation of internet-connected devices in the Internet of Things (IoT), the cloud, and virtualization, the attack surface has expanded significantly. Every connected device represents a potential entry point for cybercriminals.<\/span><\/p>\n

The massive accumulation of data caused by the digitization of information is another vulnerability we face as a society. Protecting this data, much of which is sensitive and private, is crucial to guaranteeing people’s privacy and preventing identity theft or phishing<\/em> . <\/span><\/p>\n

In light of the increase in cyber threats, governments, both at the European and national levels, have made an effort to increase cybersecurity levels by evolving regulations and standards that guarantee data security and privacy. <\/span><\/p>\n

This effort has resulted in the updating of two key standards for cybersecurity in our country:<\/span> Royal Decree 311\/2022<\/span><\/a> , of May 3, which regulates the<\/span> National Security Scheme (ENS)<\/span><\/a> and the ISO 27001<\/a> standard<\/span> Information security, cybersecurity and privacy protection & Information security management systems.<\/span><\/p>\n

\"\"<\/p>\n

What is the National Security Scheme (ENS)?<\/h2>\n

The National Security Scheme (ENS) is a regulatory and reference framework,<\/span> established in Spain, based on Spanish legislation and European regulations related to information security, with the objective of creating the necessary conditions of trust in the use of electronic means, through measures to guarantee the security of systems, data, communications and electronic services, allowing citizens and public administrations to exercise their rights and fulfill their duties through these means.<\/span> <\/p>\n

The ENS was created in 2010 with Royal Decree 3\/2010, of January 8, which establishes the principles and requirements necessary to protect the confidentiality, integrity, availability and authenticity of information in public entities and bodies. <\/span><\/p>\n

Key Changes of the new National Security Scheme (RO 311\/2022)<\/h2>\n

In 2022, the previous decree was repealed and Royal Decree 311\/2022, of May 3, came into force. This decree includes new objectives such as: <\/span><\/p>\n