ENS Compliance
The ENS Compliance option allows managing the compliance status of the Security Measures and the controls established in the different evaluations of the regulation, along with their degree of applicability based on the System Categorization.
Compliance Evaluations List
When accessing the option, the tool displays a list of ENS evaluations that have been established, by default showing those that are active.
Different actions can be performed in the table, including:
Add: Allows creating a new ENS evaluation. By clicking the button, you can select the option "Create ENS Catalog" and the evaluation will be generated with the 2022 version of the Royal Decree.
NOTE: Evaluations from the 2015 version will continue to be visible, but only new ones from the 2022 version can be created.
Delete: Allows deleting one or more ENS evaluations, with the possibility of multiple selection.
Copy: Allows copying an ENS evaluation with all its information to reuse it.
Activate/Deactivate: This option allows performing two different actions:
Deactivate an evaluation: when deactivating an evaluation, a historical record of it will be created that cannot be edited. The security level and the degree of applicability of all security measures at that moment will be saved. The buttons for Associate Documentation and Controls will be deactivated, as well as editing the End Date.
Activate an evaluation: you can activate a non-active evaluation. This will allow you to edit the evaluation again and make changes to it.
Show: Allows filtering the evaluations in the table:
All: Displays all NSF evaluations, both active (shown in green) and historical ones.
Active: Only active NSF evaluations will be displayed. This will be the default view.
Download:
CSV Report: A report will be generated with the list of evaluations that match the applied filters. The report will be available in Pending Downloads.
ENS Evaluation
In this view, all ENS requirements will be displayed according to the selected version from the list and the degree of applicability based on the System Categorization .
Requirements Management
Degree: Automatic field calculated based on the System Categorization. It is editable only at the controls level (3rd and 4th level in 2015 and 2022 evaluations respectively).
Current Status:
Editable field only at the controls level, through a dropdown, indicating the status of the requirements or controls.
Automatic field only at the Security Measures level (3rd level). The label "Adequate" will be displayed when all applicable controls show a 100% completion degree.
NOTE: Controls marked as "Not Applicable" will not be considered when calculating whether the security measure is "Adequate" or not.
Different actions can be performed in the table, including:
Associate Documentation: Allows associating one or more documents from the document manager to the Security Measures or ENS requirements. To do this, the desired row must be selected and the "Associate Documentation" button must be clicked, which will open a window showing the document tree stored in the Document Manager . To associate the documentation, the desired document checkboxes must be selected.
Once the documents are associated, they will be displayed in the corresponding column of the security measure or requirement.
Associate Control: Allows associating one or more controls registered in Control Management or in the NSF Adaptation Plan to the requirements to evidence their implementation. To do this, select the desired row and click the "Associate Control" button, which will open the following screen:
To associate one or more controls, the desired control checkboxes must be selected and the Return button must be clicked or the window closed.
If you want to remove an association, the user must access the controls list, deselect the desired checkboxes, and click the Return button or close the window.
Expand: Allows expanding the list of actions.
Collapse: Allows collapsing the list of actions.
Return: Clicking the button allows returning to the Compliance Evaluations List view.
End Date: Field to indicate the review date of the Security Measures.
Download
Docx Report: A report will be generated with all the evaluation information. The report will be available in Pending Downloads.
Filters:
In addition to filtering by Security Measures, it is possible to filter by actions independently in the Actions Search section.
Column visibility: It is possible to adjust column visibility by adding or hiding the desired ones, by right-clicking on the table header.