CIBERSECURITY | REGULATORY COMPLIANCE

ENS COMPLIANCE

We prepare your company to get certified under the National Security Framework (ENS) and gain access to public sector contracts

Talk to specialist  

 ENS COMPLIANCE FOR PUBLIC SECTOR SUPPLIERS  

 Choose the level of support you need 

 We prepare you to reach certification: analysis, implementation, and documentation, step by step, so you can bid for and provide services to the public sector without overloading your team.  

Do you already have an in-house CISO or technical cybersecurity lead?

We supply the documentation framework and materials. Your team handles implementation and prepares your systems for compliance.*

Up to €7,000

One-time payment

  • Documentation framework and templates tailored to the Spanish National Security Framework (ENS - RD 311/2022)
  • System categorization guide and checklist for Annex II security measures
  • Implementation and self-assessment / internal audit managed by your team
Get the ENS documentation package
Full-Service Support

Prepare your organization for ENS compliance and certification

End-to-end bespoke service. We guide you from initial system categorization through to certification audit day.*

Custom quote

Based on requirements

  • System categorization (Basic, Medium, or High) and custom compliance roadmap
  • Development of the Information Security Policy (ISP), internal regulations, and deployment of Annex II measures
  • On-site or remote guidance during the formal audit with the accredited certification body
  • Dedicated CISO and expert ENS consultants integrated into your team
Request full-service ENS support
*Software licenses and technical requirement implementations are quoted separately.

 WHY GET CERTIFIED 

 ENS opens the doors of the Public Sector to your company 

Regulatory compliance

If you want to bid for contracts with the Administration, you must comply with ENS: it's a requirement mandated in public procurement specifications (art. 2.3, RD 311/2022).

Cybersecurity solutions aligned with NIS2

You need to align with Directive (EU) 2022/2555. Complying with ENS brings you directly closer to the requirements demanded by NIS2 for essential and important operators.

Advisory and support

Your team doesn't have time to handle it alone. You need a CISO and expert technicians who integrate into your team without having to expand headcount.

 HOW WE HELP YOU

 Analysis, compliance plan, and implementation 

Analysis of your organization

We analyze risks and help you build the initial documentation framework, as well as identify everything you're missing to comply with ENS and get certified.

Compliance plan

With the results of the analysis, we plan a roadmap to achieve the goal, and develop basic procedures and policies tailored to your organization.

Implementation

With the roadmap in place, we implement security measures, records, and the remaining documentation needed for certification.

 FREQUENTLY ASKED QUESTIONS

 Everything you need to know before taking the step

How long does a compliance process for certification take?

 It depends on the category and your starting point, but as a reference: Medium between 4 and 8 months, and High between 8 and 12. In the initial assessment, we'll give you a specific timeline for your case. 

What happens if certification isn't achieved?

 We support you through to audit day with prior reviews to minimize that risk. If any non-conformities come up, we help you develop a corrective action plan at no additional diagnostic cost.

We already have ISO 27001, is it compatible?

 Yes. We reuse a good part of the documentation base and controls already implemented, which usually reduces the time and cost of ENS compliance.

Do you work with companies of any sector and size?

 We work both with SMEs bidding with the Administration for the first time and with organizations that have more complex systems. The scope of the service adapts to your organization and ENS category.

How do I choose between the documentation kit and full support?

 If you already have a technical cybersecurity profile or an in-house CISO who can lead the implementation, the documentation kit is enough. If you'd prefer that we handle everything for you, the full support option includes our team as part of yours.

 

 

SHALL WE BEGIN? 

Tell us where you stand and we'll tell you what you need 

Fill out the form and we'll contact you within 24 hours for an initial, no-obligation assessment.  

Subscribe to our newsletter and stay updated on the latest in technology and cybersecurity.
accio-10-negre (1)
pyme_innovadora_meic-SP_web
kit consulting cabecera
ADHESIVO PÁGINA WEB (1)