Verifiable security: conformity with the ENS.

EstratégicaMente's Information System for Digital Services and Artificial Intelligence (SI-EM) conforms to Spain's National Security Framework (Esquema Nacional de Seguridad, ENS) in the BASIC category, as established by a documented self-assessment under Royal Decree 311/2022.

Declaration of Conformity · BASIC category · 28 September 2026
BASICSystem category, determined under Annex I of Royal Decree 311/2022
38Measures of the CCN-STIC-890C profile assessed one by one, each with its evidence
37 + 1Measures conformant and one not applicable to the system scope
2028Ordinary review before 28 September 2028, or earlier if the system changes
Badge of the Declaration of Conformity with the National Security Framework (ENS), BASIC category, Royal Decree 311/2022. Links to the signed Declaration.

Declaration of Conformity badge · CCN-STIC-809

Declaration

What we declare

Interim Manager Consulting, S.L. declares that the SI-EM system has been self-assessed and meets the applicable requirements of the National Security Framework for the BASIC category, within the defined scope.

The signed Declaration is available on request at hola@estrategicamente.info.

Scope

  • Strategy consulting
  • Grants management
  • AI compliance and governance
  • Development and operation of AI suites
  • SaaS tools and in-house CRM
  • Associated digital services, communications and document management

How we ensure it

Security by design

Controlled accessMulti-factor authentication, least privilege and periodic review of access and privileges.
Protected dataEncryption, access control in the databases and encrypted backups with tested restoration.
TraceabilityLogging of relevant activity and evidence linked to each security measure.
Security governanceAn approved security policy, with separate Security and System officers.
AI with judgementThe secure architecture of our AI suites and team training are part of the system.
Continuous improvementPeriodic review of suppliers, privileges and risks, and re-categorisation if a service requires it.

Scope of the declaration

What it covers

This is a Declaration of Conformity for the BASIC category, based on a documented self-assessment; it is not a certification issued by a certification body. It refers to the system defined in the scope: if a tender requires the MEDIUM or HIGH category, or an explicit certification, the procedure for that scope is followed.

Royal Decree 311/2022 of 3 May regulating the National Security Framework · CCN-STIC-890C guide, specific compliance profile for smaller entities

Preparing a public procurement file?

We provide the contracting authority with the signed Declaration and, on request, the documentation behind it.

Write to us

Responsible entity

Interim Manager Consulting, S.L. (EstratégicaMente) · Tax ID B70399449 · Vía Norte, 12B · 36204 Vigo (Pontevedra, Spain) · hola@estrategicamente.info

Questions? This AI assistant, tailored to this service, answers instantly.
Talk to EstratégicaMente
Artificial intelligence assistant. Not a person. Human oversight and editorial responsibility · AI Policy
Hello. Would you like to know more about the team?