Accredited certification entities

The National Accreditation Body (ENAC) makes available to interested parties the accreditation scheme for entities wishing to certify compliance with the National Security Scheme (ENS).

The accreditation scheme has been developed by ENAC in close collaboration with the Ministry of Finance and Public Function (MINHAFP) and the National Cryptology Centre (CCN).

In the case of systems classified with the degree of LIMITED DIFFUSION (DL) or equivalent, an entity must be accredited by ENAC in the scope of application of the National Security Scheme in accordance with the UNE-EN ISO/IEC 17065:2012 standard in order to certify compliance with ICT requirements. In addition, security audit entities must have Enterprise Security Clearance (HSEM) in place.

It will also be possible to certify compliance with the STIC requirements in the area of classified systems (DL) among those audit entities that comply with any of the following options (CCN-STIC-101):

  1. To be an entity, body, agency and unit linked to or dependent on the Public Administrations whose competences include the development of information systems audits, as stated in its creation regulations or structure decrees, and where due impartiality is guaranteed.
  2. Exceptionally, be a company validated by the CCN, which has demonstrated sufficient technical capacity to carry out ICT audits/inspections on systems handling classified information.

Those interested in applying for accreditation should contact ENAC at: This email address is being protected from spambots. You need JavaScript enabled to view it.

Certification activities are foreseen on a transitory basis until two years after the Technical Security Instruction comes into effect in accordance with the National Security Scheme published in the Official State Gazette No. 265 of 2 November 2016, in accordance with the provisions of Section VI of the Requirements of Certification Bodies. During this period, the certifications granted by an entity IN PROCESS will continue to be valid even if the certifying entity does not pass ENAC's accreditation process. For further information, please refer to the Technical Instruction on Conformity with the ENS.

Accredited or accrediting certification bodies to issue certifications of conformity with the ENS and systems classified with the degree of LIMITED DIFFUSION (DL) or equivalent:

Name Company name Web link ENS Accreditation Status STIC Accreditation Status (DL)
AENOR Internacional AENOR Internacional S.A.U. www.aenor.com ACREDITADA
(21/04/2017)
ACREDITADA
(21/04/2019)
Audertis Audit Services Audertis Audit Services, S.L. www.audertis.es ACREDITADA
(29/12/2017)
ACREDITADA
(29/12/2017)
BDO Auditores BDO Auditores, S.L.P. www.bdo.es ACREDITADA
(15/06/2018)
-
Cámara Certifica Certificación y Confianza, Cámara S.L.U. camaracertifica.es/ ACREDITADA
(05/07/2019)
-
Eurocertificación Eurocert Certification Spain S.L. eurocert.es EN PROCESO
(DESDE 27/10/2017)
-
Ingeniería de Sistemas para la Defensa de España (ISDEFE) Empresa pública de consultoría e ingeniería www.isdefe.es - ACREDITADA
(15/06/2018)
LEET Security LEET Security, S.L. www.leetsecurity.com ACREDITADA
(23/02/2018)
-
LGAI Technological Center (APPLUS) LGAI Technological Center, S.A. (APPLUS) www.appluscertification.com/es ACREDITADA
(27/07/2018)
-
OCA Global OCA Instituto de Certificación S.L.(Unipersonal) ocaglobal.com EN PROCESO
(DESDE 17/06/2019)
-
Servicio de Seguridad y Protección de Datos de la Dirección General de Administración Digital de Castilla-La Mancha Servicio de Seguridad y Protección de Datos de la Dirección General de Administración Digital de Castilla-La Mancha www.castillalamancha.es ACREDITADA
(09/11/2018)
-
Sidertia Solutions Sidertia Solutions, S.L. www.sidertia.com - ACREDITADA
(15/06/2018)
Subdirección General de Tecnologías de la Información y Comunicaciones Subsecretaría (Ministerio de Trabajo, Migraciones y Seguridad Social) www.mitramiss.gob.es ACREDITADA
(10/07/2019)
-

The date indicated when an entity is in the process of accreditation corresponds to the date on which such accreditation was requested from ENAC. During the 12-month period, the company in the process of accreditation may conduct audits and issue certificates. If accreditation has not been obtained during this period, the entity in process must cease its certification activities.

Este sitio web utiliza cookies propias y de terceros para el correcto funcionamiento y visualización del sitio web por parte del usuario, así como la recogida de estadísticas. Si continúa navegando, consideramos que acepta su uso. Puede cambiar la configuración u obtener más información consultando nuestra Política de Cookies.