ENS compliance
Categorisation, risk analysis, Statement of Applicability, policy and regulations, and support up to the certification audit.
ENS compliance
Cybersecurity
Cybersecurity for the Public Sector
Security is part of everything we develop: we work within a management system certified under the Spanish National Security Framework MEDIUM category and ISO/IEC 27001. We put that same experience at your organisation's service to bring it into line with the ENS.
- ENS MEDIUM category
- ISO/IEC 27001
- CVE CNA · INCIBE
What we do
Security in the software we deliver and in your organisation
We apply it first to our own work, in custom software development and in our solutions for the public sector; then we help you achieve it in your organisation.
ISO/IEC 27001:2022
Implementation of the information security management system, integrated with the ENS to avoid duplicating analysis or documentation.
ISO 27001 implementation
Secure development
How we protect the software we develop: static analysis, dependency scanning and dynamic testing on every change.
Secure software development
CVE Numbering Authority
We manage the vulnerabilities in our products and publish them with a CVE identifier, under the supervision of INCIBE.
CVE Numbering AuthorityWhy ATISoluciones
Certified in what we propose to you
ENS MEDIUM and ISO/IEC 27001 since 2020
For the systems that support the development and maintenance of software applications.
Our own technical team
We develop software and electronics: we understand the ENS technical measures from the inside.
Transparency on vulnerabilities
As a CVE CNA we notify affected clients and publish the vulnerabilities once fixed.
Methodology
How we run a security project
-
Diagnosis
Scope, system categories and the gap with the ENS or the standard.
-
Risk analysis
Assets, threats and safeguards, with a prioritised treatment plan.
-
Deployment
Policy, regulations, technical measures and evidence for the audit.
-
Audit and improvement
Support with the certification body, corrective actions and follow-up.
Sectors
For the public sector and its suppliers
City and provincial councils
E-government portal, municipal register, local taxes or citizen services: services that must comply with the ENS and prove it.
Universities and healthcare
Public universities and health services, with many systems to categorise and specially protected data.
Foundations and public bodies
Public sector foundations, consortia and companies, which also fall within the scope of the ENS.
Suppliers
Companies that provide services to the public sector and need ENS conformity to bid in tenders.
Frequently asked questions
Cybersecurity with ATISoluciones
What cybersecurity services does ATISoluciones offer?
Compliance with the Spanish National Security Framework, ISO/IEC 27001 implementation and its integration with the ENS, and secure software development. In addition, as a CVE Numbering Authority, we manage the vulnerabilities in our own products.
Does the software you develop comply with the ENS?
We develop and maintain it within a management system certified under the ENS MEDIUM category and ISO/IEC 27001, with automated security scans on every change. You can see the details in secure development.
Do you issue the ENS certificate of conformity?
No. The certificate is issued by an accredited certification body after its audit. We bring your organisation into compliance, implement the measures and support you up to that audit and beyond.
Can you work with small organisations?
Yes. We scale the project to the category of the systems and the size of the organisation, so that a small municipality does not take on work designed for a large public authority.
Do you need to comply with the ENS or ISO/IEC 27001?
Tell us about your case and we will show you where to start, with a proposal tailored to your organisation.
