ENS and Data Protection Audit 2026

Summary

The Valencia Port Authority is procuring independent audit services for a one-year term in two lots. Lot 1 covers internal audits of high-category systems under Spain’s National Security Scheme (ENS) and audits of compliance with the General Data Protection Regulation (GDPR) and Spanish data-protection law. Lot 2 covers an ENS certification audit of high-category systems and, if the final opinion is favourable, issuance of the certificate of conformity. The same bidder cannot win both lots; if a bidder is selected for both, Lot 2 takes priority. The total estimated budget is EUR 13,920 excluding VAT, or EUR 16,843.20 including VAT. Lot 1 is budgeted at EUR 7,360 excluding VAT and Lot 2 at EUR 6,560 excluding VAT. Bidders must demonstrate the required annual turnover, relevant audit experience, an independent and suitably qualified Chief Auditor, and a valid ENS certificate for high-category systems. Lot 2 also requires valid ENAC accreditation. Lot 1 is evaluated on technical quality, additional Chief Auditor experience and price; price is the sole award criterion for Lot 2. The contractor must plan the audits with the contracting authority, assess compliance using objective evidence, identify deficiencies and provide preliminary and final audit reports. Each audit and its preliminary report must be completed within two months of the authority’s request; the final report follows review of the corrective-action plan. Work is normally performed on site at the Valencia Port Authority. The contract lasts 12 months with no extension. Bids must be submitted electronically, and subcontracting is not permitted.