Skip main navigation
You are at: Home>About Us>AENOR information room>Press releases>Ricoh obtains the Certification of Conformity with the Spanish National Security Framework
 
 

Ricoh obtains the Certification of Conformity with the Spanish National Security Framework

06/05/2019


  • For the information systems of its three companies Ricoh España, Ricoh Spain IT Services and Techno Trends.

6 May 2019, Madrid.- Ricoh has received the AENOR Certificate of Conformity with the National Security Scheme (NSS). This certification proves that the information systems supporting Ricoh's technology solutions and services have the necessary security measures and controls for its clients from the Public Administration, giving it a differential value with respect to its competitors. 

The NSS is a mandatory Royal Decree that guarantees the security of the information systems, processes and services in the Public Administration, as well as the fact that these must be guaranteed in its operations. "Obtaining NSS conformity certification allows us to respond in the best possible way to the needs of our customers in the public sector. Now our solutions and technological services are more complete because they guarantee all the security dimensions, such as confidentiality, integrity, availability, authenticity, and traceability of information, as well as their services, according to that established in this Royal Decree", states Marcos Sanz, CISO of Ricoh Spain and Portugal. 

“Today, it is vitally important that public administration systems provide services and safeguard information according to minimum conditions of trust. In this sense, it is considered not necessary, but essential that third parties services contracted by the Public Administrations have National Security Scheme certification, to achieve certain objectives that are difficult to attack and reduce the exposure to the threat”, explains Javier Candau, head of Cybersecurity Services at the National Cryptologic Centre, owner of the NSS.

Furthermore, Carlos Villaroya, head of AENOR Business Development in Catalonia, explains that “obtaining the AENOR National Security Scheme (NSS) conformance certificate demonstrates the Ricoh's commitment to information security systems that provide services or technology solutions to the Public Administrations, helping generate confidence. As a leading company in the sector, AENOR has already certified around fifty organisations based on this scheme."

The technology company has been able to certify the information systems that support the services of its three companies Ricoh España, Ricoh Spain IT Services, and Techno Trends in the following fields:

  • Ricoh España
    • Sale, installation and maintenance of equipment and technological infrastructure
    • Development, installation and maintenance of IT applications and solutions
    • Document management processes and services 
  • Ricoh Spain IT Services
    • Development, installation and maintenance of IT applications and solutions 
  • Techno Trends
    • Sale, installation and maintenance of equipment and technological infrastructure

Security in communications and information management

Thanks to the NSS certification, the multifunctional teams at Ricoh guarantee security in the management of information of any type used by the Public Administration, including citizen records.

Furthermore, Ricoh devices now generate, through the application @copy, authenticated electronic copies of paper documents according to the Technical Interoperability Standards. "Thanks to this certification, we can now ensure a complete security environment for our Public Administration clients, since the process takes place inside the equipment, with its own software and without external access. This is especially significant when dealing with sensitive data and information from fields like Health, Taxes, Justice, or Defence, for example", states Sanz.  

Likewise, compliance with these security standards is necessary in remote communication systems, videoconferencing and collaborative solutions, to ensure the integrity and confidentiality of the information transmitted. "The same applies to the management of technological infrastructures for data storage and transmission (servers and networks), as well as the development and maintenance of applications for public administrations, for which certification is essential", concludes Sanz.