Complete title:
Royal Decree 3/2010, of January 8th, which regulates the National Security Framework within the scope of eGovernment
Real Decreto 3/2010, de 8 de enero, por el que se regula el Esquema Nacional de Seguridad en el ámbito de la Administración Electrónica
Description (short summary):Â Â
The Royal Decree 3/2010 regulates the National Security Framework foreseen in the article 42 of Spain's Law on Citizens' Electronic Access to Public Services (Law 11/2007, also referred to as the 'eGovernment Law'). It sets out a security policy for the use of electronic means in the frame of eGovernment by formulating the basic principles and the minimal requirements which guarantee the appropriate protection of the information exchanged.Â
The National Security Framework ('Esquema Nacional de Seguridad', in Spanish - ENS) pursues the creation of the necessary conditions of confidence in the use of electronic means, through measures to ensure (1) the security of the systems, data, communications and electronic services, in order to enable the citizens and the Public Administrations to exercise their rights and the fulfilment of their duties through such means, and (2) that information systems will provide their services in accordance with their functional specifications and will protect information.
In order to create such conditions, the ENS introduces the common elements that must guide the action of the Public Administrations regarding security. It introduces in particular the following main elements:
- The basic principles to be taken into account when adopting decisions about security.
- The minimum requirements for the adequate protection of information.
- The procedure to fulfill the basic principles and minimum requirements by adopting proportionate security measures.
The ENS takes into account recommendations from the European Union, the current technological situation of Public Administrations, existing services, the use of open standards and, as appropriate and in complement, standards which are of general use among the public.
Another objective of the ENS is to introduce a common language that will facilitate the interaction among Public Administrations as well as the communication of security requirements to the Information and Communication Technology Industry.
Number of pages: 50Â
Related ePractice news article:
ES: National Interoperability and Security Frameworks approved
Related ePractice publication:
ES: National Interoperability Framework for eGovernment
