CPSTIC: The CCN seal that revolutionizes technological confidence

The CPSTIC Catalog has established itself as the cornerstone for the acquisition of secure technology not only for the Spanish Public Administration, but also for other non-governmental organizations. In an environment where cyber threats are increasingly frequent and sophisticated, having a certification from the National Cryptologic Center (CCN) is not only a competitive advantage, but also a guarantee of resilience.

In summary:

The CPSTIC Catalog is the official list of security products and services reviewed and authorized by the CCN to handle sensitive information. Guarantees that the technological solutions have passed rigorous audits defined in the CCN STIC guidelines.

What exactly is the CPSTIC Catalog?

The technical definition of the CPSTIC Catalog can be found in the CCN-STIC 105 guide. This is the "Information and Communication Technologies Security Products and Services Catalog". It is the official registry where the CCN (National Cryptologic Center) includes solutions that have proven their ability to protect classified national information or highly sensitive data.

Its main objective is to offer a proven level of confidence to customers and end users, ensuring that the product has been evaluated by independent, accredited laboratories and meets the most stringent safety requirements in the country.

Key points of the catalog

• Official reference: It is the reference guide that public administration and other private companies should consider for the purchase of cybersecurity products and services.
• External evaluation: Each product must pass a demanding audit by an accredited, independent laboratory.
• Security classification: Products are categorized according to the level of information they can handle and/or the level of ENS adaptation they are capable of managing
• Constant updating: The catalog is periodically revised to include new products and services according to the evolution of identified threats....
• Quality seal: Functions as a safety certificate at the highest level , accrediting the product itself, not the organizations.

Structure and security levels in the CPSTIC

Not all products included in the CPSTIC CPSTIC Catalog have the same attributions. The catalog taxonomy divides the solutions into categories according to their functionality (identity management, network security, monitoring, etc.) and their ability to handle different levels of information classification and/or ENS levels.

Inclusion in this list enables organizations to automatically comply with most of the requirements of the National Security Scheme (ENS)simplifying internal audit processes.

Why is it vital for the public sector?

1. Technical confidence: Eliminates uncertainty about the robustness of a tool.
2. Legal compliance: Aligns technology infrastructure with current regulations.
3. Digital sovereignty: Prioritizes the use of tools verified by national intelligence.

Case Study: Proactivanet and the CPSTIC Catalog

After an intense process of auditing and continuous improvement, Proactivanet has reached a strategic milestone in its commitment to security: the Proactivanet solution is now officially included in the CPSTIC Catalog. Proactivanet solution is now officially included in the CPSTIC CatalogueCatalog, under the taxonomy of "Compliance and Governance", with an ENS High level.

This achievement, led by the company's SQA and Security team, certifies that the tool has successfully passed all the requirements validations and security audits carried out by accredited laboratories, with the endorsement of the National Cryptologic Center.

With this official accreditation, Proactivanet is positioned as one of the few IT Service and Asset Management tools authorized to operate in high security environments with the highest regulatory requirements.

CPSTIC Catalog Frequently Asked Questions (FAQ)

1. What is the CCN-STIC 105 guide? It is the normative document that regulates the criteria and procedure for a security product or service to become part of the official CCN catalog.
2. What does it mean that Proactivanet is in the catalog? It means that the product has already passed the technical tests, laboratory audits and the administrative validation of the National Cryptologic Center, being a recommended solution for the handling of sensitive information.
3. Can a private company benefit from products in the CPSTIC? Absolutely.

Do you need an IT Asset and Service Management solution that meets national security standards?Do you need an IT Service and Asset Management solution that meets national security standards?

Discover how Proactivanet helps you manage your IT services with the confidence that only a CPSTIC certified product can offer.