Last September 28th the new standardization committee was constituted, which will form part of the structure of technical committees of UNE, the Spanish Association for Standardization: the CTN 320 "Cybersecurity and protection of personal data".
UNE is the only Standardization Body in Spain, recognized by the Ministry of Economy, Industry and Competitiveness at the European Commission, and carries out its standardization work under the figure of a multisectorial association after the splitting of its activities of standardization and conformity assessment, the latter, together with training and sale of standards in AENOR International, which has now become a trading company.
UNE is the Spanish body in the European Committee for Standardization, CEN, in the European Committee for Electrotechnical Standardization, CENELEC, in the European Telecommunications Standards Institute, ETSI, in the Pan-American Commission for Technical Standards, COPANT, as well as in the International Organization for Standardization, ISO and in the International Electrotechnical Commission, IEC.
A Technical Committee for Standardization (CTN) is a body in charge of drawing up a specific standard that is used on a voluntary basis. The NTCs are managed by UNE´s technical services and composed of a series of members who form a balanced representation of the entire value chain of the standardised product or service, which guarantees the transparency, openness and consensus of the work carried out. Each NTC will have an approved and defined scope of work under which it carries out its activity.
❝The new CTN 320 “Cybersecurity and personal data protection” is the evolution of the old CTN71/SC27 “Security techniques”.
Among the aspects to be worked on by this new committee will be the methods, techniques and guidelines in the field of cybersecurity, information security, communications and IT, which includes the following areas:
- Methodology for the capture of requirements.
- Security techniques and mechanisms, including procedures for the registration of security components.
- Management of cybersecurity, information security, communications and IT.
- Management of support documentation, including standards for terminology, conformity assessment and security assessment criteria.
- The requirements and guidelines for the protection of personal data and privacy of individuals, including management aspects and privacy requirements by design and by default.
jtsec, in its commitment to standardisation as the way to a more cybersecure world, has thus joined the CTN320, together with more than forty entities that will influence the development of international standards by providing the vision of Spanish experts in the development of standards such as ISO 27001 and those that may arise in support of the new European regulatory framework such as the NIS Directive and the future Cybersecurity Act.
