ENS version with evaluable reinforcements in each security measure

[thidalgosalvador]

The file “ENS-decreto.xlsx” did not include the controls catalogued as reinforcements detailed in the security measures of Annex II. They were included in the comments of each measure together with the information of the Dimensions that applied to the measure and its application. And these reinforcements were not evaluable.

In the new version “ENS-RD-311-2020-con-Refuerzos.xlsx” the “reinforcements” controls are included as evaluable within each Annex II measure. There are a total of 134 additional controls to be taken into account in the audits, especially for the MEDIUM and HIGH categories.

Only the security measures detailed in Annex II have been left as evaluable.

The library_provider attribute has been updated to “Ministerio para la Transformación Digital y de la Función Pública - Gobierno de España”.

[eric-intuitem]

There are 3 lines that are assessable but without a ref_id: 1030, 1041, and 1109. Could we either make them not assessable (1109), or add a ref_id? This would make compatibility straightforward,
what do you think @thidalgosalvador ?

[thidalgosalvador]

Hi @eric-intuitem,

Yes, line 1109 can have the evaluable check removed as it contains two sub-controls that complement it, and these two sub-controls are evaluable.

And lines 1039 and 1041 should have the evaluable check. I forgot to put their ref_id.
For line 1039 --> ref_id: mp.sw.2.r1.1
For line 1041 --> ref_id: mp.sw.2.r2.1

Thank you very much for your review.