{"id":6276,"date":"2026-10-19T08:22:30","date_gmt":"2026-10-19T06:22:30","guid":{"rendered":"https:\/\/enthec.com\/?p=6276"},"modified":"2026-10-19T08:22:30","modified_gmt":"2026-10-19T06:22:30","slug":"spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with","status":"publish","type":"post","link":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/","title":{"rendered":"Spanish National Security Framework: What It Is and What Your Company Is Required to Comply With"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">The <\/span><b>National Security Framework is a Spanish regulation that sets minimum security requirements for systems that manage public-sector information or services<\/b><span style=\"font-weight: 400;\">. It also applies to companies that work for the public sector. If you sell services to a government agency, you will likely be required to comply with it. At Enthec, we\u2019ll explain what it is, who it affects, and what you need to do.<\/span><\/p>\n<h2><b>What is the National Security Plan?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The ENS is the set of principles and minimum requirements for protecting government agencies\u2019 information and electronic services.\u00a0<\/span><span style=\"font-weight: 400;\"><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\"><a href=\"https:\/\/www.boe.es\/eli\/es\/rd\/2022\/05\/03\/311\" target=\"_blank\" rel=\"noopener\">Royal Decree 311\/2022<\/a>, published in the Official State Gazette (BOE) on May 4, 2022, governs it and<\/span>\u00a0replaced Royal Decree 3\/2010. The National Cryptology Center (CCN) implements it through its CCN-STIC guidelines.<\/span><\/p>\n<h3><b>Who is required to comply with the National Security Framework?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">It applies to the entire public sector, as well as to private companies that provide services or solutions to a government agency. This requirement may extend to the suppliers of private companies themselves if a risk analysis warrants it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">You may be interested in: &gt;<\/span><a href=\"https:\/\/enthec.com\/en\/nis-2-how-does-it-affect-companies-and-what-measures-must-be-taken-to-comply-with-the-regulations\/\"><span style=\"font-weight: 400;\">NIS 2: How does it affect companies, and what steps should be taken to comply with the regulation?<\/span><\/a><\/p>\n<h2><b>What are the basic principles of the National Security Framework?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Article 5 establishes seven basic principles, which serve as a guide for everything else:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Security as a Comprehensive Process:<\/b><span style=\"font-weight: 400;\"> people, technology, and organization all at once, without ad hoc fixes.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Risk-based management:<\/b><span style=\"font-weight: 400;\"> we analyze what could go wrong and review it continuously.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Prevention, detection, response, and maintenance: prioritize preventing incidents, detecting them, and restoring<\/b><span style=\"font-weight: 400;\">\u00a0service.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Lines of defense:<\/b><span style=\"font-weight: 400;\"> multiple layers, so that if one fails, the others hold up.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Continuous monitoring:<\/b><span style=\"font-weight: 400;\"> detect anomalous behavior and respond promptly.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Periodic reassessment:<\/b><span style=\"font-weight: 400;\"> Update the measures as risks change.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Clarification of Responsibilities<\/b><span style=\"font-weight: 400;\">.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" class=\"size-full wp-image-6277 aligncenter\" src=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/national-security-scheme.jpg\" alt=\"National Security Scheme\" width=\"800\" height=\"533\" srcset=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/national-security-scheme.jpg 800w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/national-security-scheme-300x200.jpg 300w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/national-security-scheme-768x512.jpg 768w, https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/national-security-scheme-350x233.jpg 350w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2><b>What are the levels of the National Security Framework?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">It has three system categories: <\/span><b>basic, medium, and high<\/b><span style=\"font-weight: 400;\">. To assign a rating, assess an incident&#8217;s impact across five dimensions: confidentiality, integrity, traceability, authenticity, and availability.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Each dimension is assigned a level (low, medium, or high), and the system&#8217;s final rating is determined by the highest rating across the dimensions. This evaluation is reviewed periodically or whenever the system undergoes a significant change.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Category<\/b><\/td>\n<td><b>When it is assigned<\/b><\/td>\n<td><b>How compliance is demonstrated<\/b><\/td>\n<\/tr>\n<tr>\n<td><b>Basic<\/b><\/td>\n<td><span style=\"font-weight: 400;\">An incident would cause limited harm<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Self-assessment and declaration of conformity<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Media<\/b><\/td>\n<td><span style=\"font-weight: 400;\">The damage would be severe<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Certification audit<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>High<\/b><\/td>\n<td><span style=\"font-weight: 400;\">The damage would be very serious<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Certification audit; in the event of serious failures, service may be suspended<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><\/h2>\n<h2><\/h2>\n<h2><b>What does compliance with the National Security Framework entail in practice?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">It requires a <\/span><b>security policy, a risk analysis, and the measures listed in Annex II appropriate for each category<\/b><span style=\"font-weight: 400;\">. These are the common critical issues identified in audits:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Security Policy<\/b><span style=\"font-weight: 400;\"> Approved by the company\u2019s highest executive body.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Distinct roles:<\/b><span style=\"font-weight: 400;\"> The security team cannot report hierarchically to the IT team, except in justified cases.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Statement of Applicability:<\/b><span style=\"font-weight: 400;\"> the list of measures that apply, signed by the security officer.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Incident Management:<\/b><span style=\"font-weight: 400;\"> Private providers report incidents to INCIBE-CERT.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Audit every two years<\/b><span style=\"font-weight: 400;\">, and an additional audit if the system undergoes substantial changes.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In June 2026, the CCN <\/span><a href=\"https:\/\/www.ccn-cert.cni.es\/es\/seguridad-al-dia\/novedades-ccn-cert\/13155-el-ccn-actualiza-cuatro-guias-ccn-stic-de-su-serie-800-sobre-el-esquema-nacional-de-seguridad.html\"><span style=\"font-weight: 400;\">updated four guides in the 800 series <\/span><\/a><span style=\"font-weight: 400;\">and removed references to the old decree.<\/span><\/p>\n<h3><b>How is the continuous monitoring required by the ENS carried out?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Many companies treat the ENS as a test they take every two years, but the decree suggests otherwise. Article 6 excludes one-time actions, and Article 10 emphasizes continuous monitoring and ongoing asset assessment to detect vulnerabilities. Article 8 even calls for reducing the attack surface.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That is, in essence, Continuous Threat Exposure Management. It operates as a five-phase cycle: define, identify, prioritize, validate, and mobilize.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This is where Enthec&#8217;s solutions come in. <\/span><span style=\"font-weight: 400;\"><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\"><a href=\"https:\/\/enthec.com\/en\/kartos\/\" target=\"_blank\" rel=\"noopener\"><strong>Kartos\u00a0<\/strong><\/a>monitors<\/span>\u00a0your company from outside the perimeter. It scans the web, the deep web, and the dark web for leaked information and exposed vulnerabilities\u2014just as an attacker would. <\/span><a href=\"https:\/\/enthec.com\/en\/qondar\/\"><b>Qondar <\/b><\/a><span style=\"font-weight: 400;\">applies the same logic to people: what data about them is circulating and what risk it poses.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Do you want to know what an attacker sees in your company before your next <\/span><a href=\"https:\/\/enthec.com\/en\/the-relevance-of-cybersecurity-audits-in-companies\/\"><span style=\"font-weight: 400;\">audit<\/span><\/a><span style=\"font-weight: 400;\">?<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2><b>Frequently Asked Questions About the National Security Framework<\/b><\/h2>\n<h3><b>Is the ENS mandatory for all companies?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">No. It is mandatory for the public sector and for vendors that provide services to it when the contract requires it. If you do not work with government agencies, you are not required to do so, although you may adopt it as a best practice.<\/span><\/p>\n<h3><b>What is the difference between a declaration and a certificate of conformity?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">A declaration is a self-assessment used for basic-level systems. Certification requires an external audit and is mandatory for intermediate and advanced levels.<\/span><\/p>\n<h3><b>How often should a system be audited?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">At least every two years. If the system undergoes substantial changes, it also requires an additional audit.<\/span><\/p>\n<h3><b>Does compliance with the ENS mean compliance with the GDPR?<\/b><\/h3>\n<p><b>No. The ENS protects systems, and the GDPR protects personal data<\/b><span style=\"font-weight: 400;\">. If your system processes personal data, both apply, and the most stringent measures identified through the risk analysis take precedence.<\/span><\/p>\n<h3><b>What happens if I don\u2019t comply with the ENS?<\/b><\/h3>\n<p><span style=\"font-weight: 400;\">Most likely, <\/span><b>you\u2019ll be excluded from the bidding process or lose the contract<\/b><span style=\"font-weight: 400;\">, because the bid specifications require compliance. If\u00a0<\/span><span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\">the\u00a0<a href=\"https:\/\/enthec.com\/en\/security-breach-what-it-is-types-and-how-to-find-it\/\" target=\"_blank\" rel=\"noopener\">breach also involves<\/a><\/span><a href=\"https:\/\/enthec.com\/en\/security-breach-what-it-is-types-and-how-to-find-it\/\"><span style=\"font-weight: 400;\">\u00a0personal data<\/span><\/a><span style=\"font-weight: 400;\">, the GDPR applies. Consult an advisor about your specific situation.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The National Security Framework is a Spanish regulation that sets minimum security requirements for systems that manage public-sector information or [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":6275,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44],"tags":[24,54,109],"class_list":["post-6276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-en","tag-cybersecurity","tag-regulations","tag-ens"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u25b7 National Security Framework | Enthec<\/title>\n<meta name=\"description\" content=\"The ENS establishes minimum security requirements for public systems and their providers \u27a1\ufe0f What it is, security levels, obligations, and how Kartos helps you comply\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u25b7 National Security Framework | Enthec\" \/>\n<meta property=\"og:description\" content=\"The ENS establishes minimum security requirements for public systems and their providers \u27a1\ufe0f What it is, security levels, obligations, and how Kartos helps you comply\" \/>\n<meta property=\"og:url\" content=\"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/\" \/>\n<meta property=\"og:site_name\" content=\"ENTHEC \u00b7 Kartos \u00b7 Qondar\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-19T06:22:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/ENS-Entrada.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2048\" \/>\n\t<meta property=\"og:image:height\" content=\"1152\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Enthec\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Enthec\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/\"},\"author\":{\"name\":\"Enthec\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/person\\\/ca39e450d4d09a7a39995a9b0a27bfe2\"},\"headline\":\"Spanish National Security Framework: What It Is and What Your Company Is Required to Comply With\",\"datePublished\":\"2026-10-19T06:22:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/\"},\"wordCount\":898,\"publisher\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ENS-Entrada.jpg\",\"keywords\":[\"Cybersecurity\",\"Regulations\",\"ENS\"],\"articleSection\":[\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/\",\"url\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/\",\"name\":\"\u25b7 National Security Framework | Enthec\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ENS-Entrada.jpg\",\"datePublished\":\"2026-10-19T06:22:30+00:00\",\"description\":\"The ENS establishes minimum security requirements for public systems and their providers \u27a1\ufe0f What it is, security levels, obligations, and how Kartos helps you comply\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#primaryimage\",\"url\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ENS-Entrada.jpg\",\"contentUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/ENS-Entrada.jpg\",\"width\":2048,\"height\":1152,\"caption\":\"ENS National Security Framework\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/enthec.com\\\/en\\\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/enthec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Spanish National Security Framework: What It Is and What Your Company Is Required to Comply With\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#website\",\"url\":\"https:\\\/\\\/enthec.com\\\/\",\"name\":\"ENTHEC\",\"description\":\"Advanced AI-driven Cyber-Surveillance Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#organization\"},\"alternateName\":\"ENTHEC \u00b7 Kartos \u00b7 Qondar\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/enthec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#organization\",\"name\":\"ENTHEC\",\"alternateName\":\"ENTHEC \u00b7 Kartos \u00b7 Qondar\",\"url\":\"https:\\\/\\\/enthec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fondo-blanco_1.png\",\"contentUrl\":\"https:\\\/\\\/enthec.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fondo-blanco_1.png\",\"width\":667,\"height\":131,\"caption\":\"ENTHEC\"},\"image\":{\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/enthec.com\\\/#\\\/schema\\\/person\\\/ca39e450d4d09a7a39995a9b0a27bfe2\",\"name\":\"Enthec\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g\",\"caption\":\"Enthec\"},\"url\":\"https:\\\/\\\/enthec.com\\\/en\\\/author\\\/phernandez\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u25b7 National Security Framework | Enthec","description":"The ENS establishes minimum security requirements for public systems and their providers \u27a1\ufe0f What it is, security levels, obligations, and how Kartos helps you comply","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/","og_locale":"en_US","og_type":"article","og_title":"\u25b7 National Security Framework | Enthec","og_description":"The ENS establishes minimum security requirements for public systems and their providers \u27a1\ufe0f What it is, security levels, obligations, and how Kartos helps you comply","og_url":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/","og_site_name":"ENTHEC \u00b7 Kartos \u00b7 Qondar","article_published_time":"2026-10-19T06:22:30+00:00","og_image":[{"width":2048,"height":1152,"url":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/ENS-Entrada.jpg","type":"image\/jpeg"}],"author":"Enthec","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Enthec","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#article","isPartOf":{"@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/"},"author":{"name":"Enthec","@id":"https:\/\/enthec.com\/#\/schema\/person\/ca39e450d4d09a7a39995a9b0a27bfe2"},"headline":"Spanish National Security Framework: What It Is and What Your Company Is Required to Comply With","datePublished":"2026-10-19T06:22:30+00:00","mainEntityOfPage":{"@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/"},"wordCount":898,"publisher":{"@id":"https:\/\/enthec.com\/#organization"},"image":{"@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#primaryimage"},"thumbnailUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/ENS-Entrada.jpg","keywords":["Cybersecurity","Regulations","ENS"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/","url":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/","name":"\u25b7 National Security Framework | Enthec","isPartOf":{"@id":"https:\/\/enthec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#primaryimage"},"image":{"@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#primaryimage"},"thumbnailUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/ENS-Entrada.jpg","datePublished":"2026-10-19T06:22:30+00:00","description":"The ENS establishes minimum security requirements for public systems and their providers \u27a1\ufe0f What it is, security levels, obligations, and how Kartos helps you comply","breadcrumb":{"@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#primaryimage","url":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/ENS-Entrada.jpg","contentUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2026\/10\/ENS-Entrada.jpg","width":2048,"height":1152,"caption":"ENS National Security Framework"},{"@type":"BreadcrumbList","@id":"https:\/\/enthec.com\/en\/spanish-national-security-framework-what-it-is-and-what-your-company-is-required-to-comply-with\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/enthec.com\/"},{"@type":"ListItem","position":2,"name":"Spanish National Security Framework: What It Is and What Your Company Is Required to Comply With"}]},{"@type":"WebSite","@id":"https:\/\/enthec.com\/#website","url":"https:\/\/enthec.com\/","name":"ENTHEC","description":"Advanced AI-driven Cyber-Surveillance Platform","publisher":{"@id":"https:\/\/enthec.com\/#organization"},"alternateName":"ENTHEC \u00b7 Kartos \u00b7 Qondar","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/enthec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/enthec.com\/#organization","name":"ENTHEC","alternateName":"ENTHEC \u00b7 Kartos \u00b7 Qondar","url":"https:\/\/enthec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/enthec.com\/#\/schema\/logo\/image\/","url":"https:\/\/enthec.com\/wp-content\/uploads\/2024\/08\/Fondo-blanco_1.png","contentUrl":"https:\/\/enthec.com\/wp-content\/uploads\/2024\/08\/Fondo-blanco_1.png","width":667,"height":131,"caption":"ENTHEC"},"image":{"@id":"https:\/\/enthec.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/enthec.com\/#\/schema\/person\/ca39e450d4d09a7a39995a9b0a27bfe2","name":"Enthec","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c651156a56ce73c21e2176bf26f824075ecff236092c7046a60b650fa25eeef5?s=96&d=mm&r=g","caption":"Enthec"},"url":"https:\/\/enthec.com\/en\/author\/phernandez\/"}]}},"_links":{"self":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts\/6276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/comments?post=6276"}],"version-history":[{"count":2,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts\/6276\/revisions"}],"predecessor-version":[{"id":6279,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/posts\/6276\/revisions\/6279"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/media\/6275"}],"wp:attachment":[{"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/media?parent=6276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/categories?post=6276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/enthec.com\/en\/wp-json\/wp\/v2\/tags?post=6276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}