Overview
The National Security Framework (Esquema Nacional de Seguridad - ENS) is Spain's national cybersecurity and information security framework that establishes the security principles, requirements, and measures for protecting information and digital services used by the public sector. Applicable to Spanish public administrations and organizations that provide services to them, the ENS provides a common framework to ensure the confidentiality, integrity, availability, authenticity, traceability, and preservation of information processed through electronic means. Established in 2010 and updated through Royal Decree 311/2022, the framework adopts a risk-based approach to cybersecurity and requires organizations to implement appropriate organizational, operational, and technical security controls. The ENS aims to strengthen trust in government digital services, improve cyber resilience, and ensure the secure management of public sector information systems.