The AOC, leader in the State with 22 services certified in accordance with the National Security Scheme
Share
The Open Administration of Catalonia (AOC) has achieved one of the most significant milestones in recent years in terms of cybersecurity and digital trust: 22 of its services have obtained certification in accordance with the ENS with a high level. In this way, our commitment to security becomes the peace of mind of the more than 2.250 public administrations we serve.
This achievement places the AOC among the leading public organizationseres of the State in the application of the most demanding security standards to digital administration services, both in terms of the number of certified services and the scope of the certification.
This recognition certifies that the AOC's services meet the most demanding requirements in terms of information security, data protection, risk management and guarantee of service continuity. The certification is the result of a multi-year project that has required the review and continuous improvement of the information systems, organizational processes and security measures deployed by the entity.
Beyond technical recognition, this milestone reinforces the trust of Catalan public administrations and citizens in digital services that are essential for the functioning of electronic administration and for the digital relationship between administrations, companies and people.
Certify once to protect 2.250 administrations
The relevance of this achievement goes far beyond the AOC. Thanks to the shared digital infrastructure model, the certification of an AOC service directly benefits more than 2.250 Catalan public administrations who use their services.
When a city council or other administration uses services such as VALID, e-NOTUM o SAVE IT, not only incorporates a technological tool, but also the security guarantees with which it has been audited and certified. This allows user entities to take advantage of the certified conformity of the AOC within the framework of their own adaptation processes to the ENS.
This is one of the great values of shared public digital infrastructure: turning a highly demanding regulatory requirement into a capability accessible by default for all administrations, regardless of their size or the technical resources they have.
The alternative, that each administration would have to individually certify all the components of its e-administration, would be particularly complex and costly for the vast majority of Catalan public entities. The shared model of the AOC allows for economies of scale, guarantees high levels of security for the entire Catalan public sector and, above all, strengthens trust in digital public services.
More security and more confidence for citizens
Obtaining this certification has a direct impact on citizens. In a context in which more and more procedures and management are carried out online, having services certified according to the most demanding security standards provides additional guarantees in key aspects such as:
The protection of personal data.
The availability of digital services.
Reducing the risk of cyber incidents.
The continuity of public services in the face of possible incidents.
Ultimately, it contributes to strengthening citizens' trust in the digital relationship with public administrations.
What is the National Security Scheme?
The National Security Scheme is the regulatory framework that establishes the principles and requirements that public administrations and the entities that collaborate with them must comply with to guarantee adequate protection of information and electronic services.
The ENS defines the necessary measures to ensure the confidentiality, integrity, availability, authenticity and traceability of the information and the systems that manage it. In this way, it establishes a homogeneous level of security for the entire public sector and promotes trust in digital services.
The certification of conformity is granted by accredited entities and involves an independent verification that certifies that the controls and security measures required by the regulations are effectively applied.
Why is the high category important?
The ENS establishes three levels of security: basic, medium and highThe high category corresponds to systems that manage critical information or services that require the highest level of protection.
Obtaining this certification in the cloud environment where AOC services are hosted implies accrediting the implementation of a wide set of technical, organizational and operational measures aimed at preventing, detecting and responding to increasingly sophisticated threats.
In a context marked by the increase in cyberattacks and the growing dependence on digital services, having high-category ENS certifications is a key element in guaranteeing digital trust and the continuity of public services.
From 3 to 22 certified services in the high category in just two years
The current achievement culminates a strategy initiated in 2024. At that time, only three AOC services had ENS certification:
SAVE IT, electronic preservation and custody service.
VALID, digital identification and authentication service.
PSIS (Identification and Signature Services Platform), key infrastructure for identification and electronic signature processes.
From this first certification, the AOC launched an ambitious process of adapting its systems and services to the requirements of the ENS. The result is that, in just two years, it has gone from 3 to 22 certified services, an evolution that places the AOC among the most advanced public administrations in the State in this area.
In this way, the 22 certified services are:
Còpia
Open Data
SAVE IT
EACAT 3.0
El meu espai
e-NOTUM
ERES
e-Dashboard
iArxiu
MUX
Representa
Timestamp (TSA)
Digital Certification Service
Remote Signature Service
Signer
Centralized Signature
SIR
Transparència and Seu-e
VALID
Validator – PSIS
SUITCASE
Via Oberta
To this list we must add two solutions integrated into the AOC's service catalog that have their own certification: e-FACT, provided by Seres, and the portasignatures from Viafirma.
Currently, only four services remain pending certification:
the e-TRAM i Sara network connection, who already have the certification process planned
the platform Decidim and the Global Leaks Alerts channel, solutions based on free and uncertified software.
Aixó means that 86% of the AOC's catalog of services operate under the conformity of the ENS.
In addition, all AOC services are hosted in data centers that are certified to the high level of the ENS.
A permanent commitment to digital security and trust
Security is one of the fundamental pillars of the digital transformation of public administrations. For this reason, the AOC maintains a continuous improvement strategy based on governance, risk management, auditing, monitoring and constant updating of protection measures.
The achievement of ENS certification for 22 services representa a great milestone, but it also consolidates a country model: a shared digital infrastructure that allows all Catalan administrations, regardless of their size, to offer secure, resilient and reliable digital services.
With this achievement, the AOC reinforces its role as a trusted digital infrastructure for the Catalan public sector and consolidates its leadership in the field of security of digital public services.
The service Representa has obtained the 1-star accessibility certification awarded by TOTHOM, a recognition that accredits compliance with web accessibility criteria and reinforces the...
