Esquema Nacional de Seguridad (ENS)

Esquema Nacional de Seguridad (ENS) is Spain's national framework of security principles and minimum requirements for information systems, currently governed by Real Decreto 311/2022 and administered by the Centro Criptológico Nacional (CCN). It applies to Spanish public sector bodies and to private companies providing technology, services, or solutions to those public entities, with security measures scaled across three risk categories — Básica, Media, and Alta — based on the sensitivity of the systems and data involved.