01
Category and scope
We determine if Basic, Medium or High applies and what systems are included.
ENS RD 311/2022
ENS adequacy with measures, evidence and realistic plan.
For organizations that work with public administrations or suppliers that need to order compliance and security in accordance with the ENS.
Diagnosisgaps and prioritiesPlanrealistic roadmapEvidenceaudit and monitoringAddressclear decisionsTechniqueverifiable controls
WHAT WE SOLVE
A clear route, without useless documentation.
We convert technical, regulatory and client requirements into prioritized, responsible actions and maintainable evidence.
02
ENS Gap
We compare the current situation against expected measures and evidence.
03
Adaptation plan
We prioritize measures by risk, impact and dependencies.
04
Audit and continuity
We prepare evidence and leave a maintainable system.
DELIVERABLES
What do you take?
Documents and decisions prepared to operate, review and defend before clients, audits or management.
- Analysis of applicability and ENS category.
- Map of gaps against RD 311/2022.
- Prioritized adaptation plan.
- Evidence and supporting documentation.
- Alignment with ISO 27001 where applicable.
METHOD
Diagnosis, plan and support.
First we understand scope and urgency. We then prioritize gaps by risk, business impact, and effort. Finally we accompany the implementation with evidence and monitoring.
- Initial session for situation, objectives and restrictions.
- Map of gaps and quick wins.
- Roadmap by phases with those responsible.
- Support for evidence and communication with third parties.
FAQ
Common questions.
Direct answers before starting.
Does ENS replace ISO 27001?
No. They can be complemented: ENS sets requirements for the public sector and suppliers; ISO 27001 structures the ISMS.
What category do I need?
It depends on services, information processed, impact and contractual obligations.
Can you start with a diagnosis?
Yes. It is recommended to avoid oversizing measurements.
DIAGNOSIS
Tell us the starting point.
We give you a brief route with priorities and next steps.
- Response within 24/48 business hours.
- Business and audit oriented.
- No commitment.