ENS certification
OnClick is certified under Spain's National Security Framework. We work within a security framework recognised by the public sector, and we can help you take the same step.
What is the National Security Framework (ENS)?
The Esquema Nacional de Seguridad (ENS), Spain's National Security Framework, sets out the principles and requirements for protecting the information and services that public bodies handle electronically. It also applies to companies that provide services or technology solutions to the public sector.
ENS certification confirms, after an independent audit, that an organisation applies the security measures the framework requires in a systematic, documented way. OnClick has achieved this certification, and it translates into a more secure way of working across all our projects.
What OnClick's ENS certification means for you
A supplier fit for the public sector
If you are a public body or work for one, having an ENS-certified supplier makes it easier to meet security requirements in contracts and tenders.
Better-protected data
Your information is handled with defined, reviewed and audited security measures, in line with data protection law.
Documented processes
Development, support and systems follow written procedures, with clear responsibilities and a record of what is done.
Continuous improvement
The ENS requires measures to be reviewed and improved regularly, so security never stands still.
Security measures required by the ENS
Some of the areas the framework covers, and which we apply in our everyday work:
- Risk analysis and management
- Security policy and defined roles
- Access control and identity management
- Protection of devices, networks and communications
- Backups and service continuity
- Security incident management
- Activity logging and traceability
- Regular compliance audits
We help you prepare for ENS certification
We have been through the process and know what it involves. Now we can guide you.
- 01
Initial assessment
We review your systems, the information you handle and how far you currently comply with the ENS.
- 02
Risk analysis
We identify threats and vulnerabilities and assess their impact to prioritise the measures.
- 03
Compliance plan
We define policies, procedures and technical measures, and help you put them in place.
- 04
Audit preparation
We review your documentation and evidence so you reach the certification audit fully prepared.
Cybersecurity with funding for SMEs
If you are an SME, the Kit Consulting cybersecurity certification service may help fund part of your preparation. And if you are looking for everyday protection, take a look at our cybersecurity service.
We apply the same standards in our technology consulting and in every custom software project.
Frequently asked questions
Who needs ENS certification?
Spanish public bodies and the companies that supply them with services or technology solutions. More and more public contracts require it from suppliers.
Is the ENS only useful for working with the public sector?
No. Although it was designed for the public sector, it is a thorough set of good practices that improves security for any company handling sensitive information.
How does the ENS relate to data protection?
They are separate but complementary rules. ENS measures help protect personal data and demonstrate due diligence in how it is processed.
How long does it take to prepare for certification?
It depends on the size of the organisation, its systems and its starting point. After the initial assessment we give you a realistic timeline.
Can you carry out the certification audit?
No: the audit is carried out by an independent certification body. We help you get ready to pass it.
Let's talk about your project
Tell us what you need and we'll get back to you within 24 business hours, no strings attached.