The competent national authority for cybersecurity under Law 22/2022, also designated as the single national contact point. The law's text opened for this file does not state when it was created.
What they do
Supervises network and information-system security for essential and important services and publishes the list of those services. Significant incidents are notified to the CSIRT-AD. For financial entities the AFA shares the competent-authority role in coordination with the ANC-AD, and the two signed a memorandum of understanding in October 2026.
This site uses only the cookies it needs to work, such as keeping you logged in. It uses no advertising or tracking cookies.
Read the Cookie Notice.
Suggest a correction or addition
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
