Pentr
Sign in Start a campaign →
Frameworks · ENS · RD 311/2022

Public sector, con pruebas.

Spain's Esquema Nacional de Seguridad (RD 311/2022) is mandatory for public administrations and the suppliers that serve them. Systems categorised MEDIA or ALTA must undergo periodic penetration testing and a biennial security audit. Pentr runs those tests and seals ENS-mapped evidence your CCN-aligned auditor expects.

Categoría
MEDIA / ALTA
Dimensiones
D·A·I·C·T
Cadencia
Bienal + on change
Evidence retention
12 months
Run an ENS campaign → See the control map
Medidas cubiertas

Anexo II — tested and sealed.

Each row is an ENS measure, the phase in the agent that satisfies it, and the artifacts the locker holds for your audit.

ID
Medida
Phase
Artifacts
op.pl.1
Análisis de riesgos
Scope, risk analysis, and consent sealed before the run.
01 · pre-engagement
3 sealed
→
op.exp.1
Inventario de activos
Hosts and services resolved across the declared scope.
02 · intelligence
6 sealed
→
op.exp.2
Configuración de seguridad
Hardening gaps and exposed surfaces mapped.
03 · threat modeling
5 sealed
→
op.exp.4
Mantenimiento y actualizaciones
Missing patches matched against KEV + NIST NVD.
04 · vuln analysis
14 sealed
→
mp.sw.2
Aceptación y puesta en servicio
The penetration-test proof MEDIA / ALTA systems require, sealed.
05 · exploitation
11 sealed
→
op.mon.1
Detección de intrusión
Detector alerts triggered by agent traffic, captured.
06 · post-exploit
4 sealed
→
Anexo III
Auditoría de la seguridad
Signed, ENS-mapped report for the biennial audit.
07 · reporting
3 sealed
→
Phase → medida mapping

Where each phase earns its evidence.

01 · Pre-engagement

Análisis de riesgos

Locks the scope and seals a signed consent attestation.

op.pl
02 · Intelligence

Inventario

Resolves hosts and services into an asset inventory.

op.exp.1
03 · Threat modeling

Configuración

Maps hardening gaps and exposed operational surfaces.

op.exp.2
04 · Vuln analysis

Mantenimiento

Missing patches matched against KEV + NIST NVD.

op.exp.4
05 · Exploitation

Prueba de penetración

Confirmed exploit with a re-viewable chain, sealed.

mp.sw.2op.acc
06 · Post-exploitation

Monitorización

Captures whether intrusion detection flagged the agent.

op.mon
07 · Reporting

Auditoría

sha-256 chain signed at seal time. Biennial-audit ready.

Anexo III

Prepare your ENS audit.

Plug in a scope and a category. The agent runs all seven PTES phases and seals ENS-mapped evidence, ready for the biennial security audit MEDIA and ALTA systems require.

Start a pilot → Talk to an ENS specialist