Spanish public administrations must comply with ENS as a legal requirement since Royal Decree 311/2022. The transposition of NIS2 and GDPR add specific obligations that must be coordinated with existing management systems.
Key regulations in public administration
- ENS: mandatory across the entire Spanish public sector β system categorization, security measures, biennial audit
- GDPR: processing citizensβ data β DPO mandatory in many cases
- NIS2: critical digital public services within the scope of essential entities
- ISO 27001: increasingly required in public procurement specifications
How ermine helps
ermine includes the complete ENS template adapted to Royal Decree 311/2022, manages the biennial audit cycle required by CCN-CERT and generates the Conformity Declaration or Certification Dossier.