National security scheme

The Port Authority of Avilés relies on ICT (Information and Communication Technologies) systems to achieve its objectives, exercise its powers, and provide its assigned services. These systems must be managed diligently, taking appropriate measures to protect them against accidental or deliberate damage that could affect the availability, integrity, or confidentiality of the information processed or the services provided.


To defend against these threats, a strategy is required that adapts to changing environmental conditions to guarantee the continuous provision of services. This involves implementing the minimum security measures required by the National Security Framework, as well as continuously monitoring service levels, tracking and analyzing reported vulnerabilities, and preparing an effective incident response to ensure the continuity of services provided.

 

Royal Decree 311/2022 of May 3 updates the National Security Framework (ENS), within the framework of the package of urgent actions adopted on May 25, 2022, to strengthen defense capabilities against cyber threats to the public sector and collaborating entities that supply technologies and services to it.
The new National Security Framework, which has undergone continuous evolution since its initial development in 2010, establishes the security policy for the adequate protection of processed information and services provided through a common approach of basic principles, minimum requirements, protection measures, and compliance and monitoring mechanisms for the public administration, as well as for private sector technology providers that collaborate with the administration.
You can consult our Information Security Policy in this document:

ENS-02-POL-01_Política_de_Seguridad.pdf