Guides and Frameworks
As part of its mission, the CNCS prepares and makes available documentation aimed at organizations, with the goal of supporting and promoting their training and increasing their cybersecurity maturity. In addition to the National Cybersecurity Reference Framework, other frameworks and guides are available for consultation. The use of these instruments can also be complemented with various tools and technical recommendations.
Risk Management GuideThe Risk Management Guide in Information Security and Cybersecurity aims to guide organisations in carrying out an autonomous cybersecurity risk management process at an organisational level, making it possible to assess the level of risk associated with different assets and to list a set of security actions and measures that foster the resilience of their networks and information systems. |
Guide to Selecting Multifactor Authentication SolutionsThe Guide To Selecting Multifactor Authentication Solutions is a framework whose aim is to define a structured approach adapted to the specific needs of each organisation in the process of adopting multifactor authentication mechanisms. |
Digital Transition GuideThe Digital Transition and Cybersecurity Guide (DTCG) aims to guide organisations in preventing cybersecurity risks during their digital transition processes. This guide considers a set of digital transition objectives that can be adopted by different organisations in order to achieve their business objectives. With the purpose of promoting a digital transition aligned with the possible cybersecurity risks inherent in the process, the guide identifies a set of risks and suggests controls to be implemented to mitigate them. |
Cybersecurity Competencies FrameworkCNCS has made available a Cybersecurity Competencies Framework aimed at all those interested in training and hiring professionals, among other areas in which identifying cybersecurity competencies is important. |
Crisis Communication FrameworkThe Cybersecurity Risk and Crisis Communication Framework (Reference) aims to help national organisations communicate in cybersecurity risk and crisis contexts, listing steps, identifying essential elements and functions in the communication team formed for these situations, and inviting continuous improvement of the communication plans in question. |
Last updated on 12-02-2025