National security scheme
The Port Authority of Avilés relies on ICT (Information and Communication Technologies) systems to achieve its objectives, exercise its powers, and provide its assigned services. These systems must be managed diligently, taking appropriate measures to protect them against accidental or deliberate damage that could affect the availability, integrity, or confidentiality of the information processed or the services provided.
To defend against these threats, a strategy is required that adapts to changing environmental conditions to guarantee the continuous provision of services. This involves implementing the minimum security measures required by the National Security Framework, as well as continuously monitoring service levels, tracking and analyzing reported vulnerabilities, and preparing an effective incident response to ensure the continuity of services provided.
The new National Security Framework, which has undergone continuous evolution since its initial development in 2010, establishes the security policy for the adequate protection of processed information and services provided through a common approach of basic principles, minimum requirements, protection measures, and compliance and monitoring mechanisms for the public administration, as well as for private sector technology providers that collaborate with the administration.
You can consult our Information Security Policy in this document:
ENS-02-POL-01_Política_de_Seguridad.pdf

