Who can use it
Only systems in the básica category can show conformity through a Declaración. Organisations with básica systems can also choose to go through a formal certification audit instead, which some public contracts or customers prefer.
How it works
The organisation carries out an internal assessment of the ENS measures that apply, documents the evidence, and issues the declaration. It can then display the corresponding conformity seal. The assessment must be repeated periodically, at least every two years, and when there are significant changes to the system.
Declaration vs certification
A Declaración is issued by the organisation itself. A Certificación de Conformidad is issued by an accredited certification body after an external audit, and is required for media and alta systems.
Reference guide
The CCN-STIC 809 guide sets out how to issue and publish the Declaración and Certificación de Conformidad.
