CCN STIC Products and Services Catalog (CPSTIC)

The CPSTIC is a list of products verified by the CCN. This catalogue includes products approved for handling classified national information and qualified ICT security products for use in the High category of the Spanish National Security Framework (ENS).

CPSTIC provides the necessary cybersecurity assurance for the Public Administration, as well as companies and organizations of strategic interest in Spain who wish to host their workloads in the cloud.

The covered AWS services that are within the scope of the CPSTIC can be found within AWS Services in Scope by Compliance Program. If you would like to learn more about using these services and/or have interest in other services please contact us.

The CPSTIC applies to all regions where certified services are available.

The verification audit takes place every five years, with a delta assessment if the qualified product undergoes significant modifications in the meantime.