Article 38.2—Article 38.2
>Control Description
The information systems included in the scope of article 2 will be subject to a process to determine their conformity with the ENS. To this end, MEDIUM or HIGH category systems will require an audit to certify their conformity, without prejudice to the security audit provided for in Article 31, which may also serve the purposes of certification, while systems BASIC category will only require a self-assessment for their declaration of conformity, without prejudice to the fact that they may also undergo a certification audit.
Both the self-assessment procedure and the certification audit will be carried out in accordance with the provisions of article 31 and annex III and in the terms determined in the corresponding Technical Safety Instruction, which will also specify the requirements required of the certifying entities.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.