GlossaryENS

CCN

Short answer

The CCN (Centro Criptológico Nacional) is the Spanish public body responsible for the security of information systems in the public sector. Part of the National Intelligence Centre (CNI), it maintains the ENS guides, runs the CCN-CERT and publishes tools and training.

What the CCN does

The CCN develops the security standards and guides that public bodies follow, certifies the security of products used in classified systems, and trains public sector staff. It is the body behind the practical implementation of the ENS.

CCN-CERT

CCN-CERT is the CCN's incident response team. It is the national CERT for the public sector and for strategic companies, and one of the CSIRTs that receive incident reports in Spain.

Tools and resources

Beyond the CCN-STIC guides, the CCN provides tools widely used in ENS projects, such as PILAR for risk analysis and INES for annual reporting on the state of ENS compliance.

Why it matters for companies

Any company working towards the ENS will follow CCN guides and use CCN terminology. The CCN also publishes the list of organisations with a valid ENS certification.

Related terms

Keep reading on this topic

The Esquema Nacional de Seguridad (RD 311/2022): categorisation, security levels, required controls and what public-sector contracting demands.

Go to the topic hub