{"id":748035,"date":"2026-06-05T13:00:13","date_gmt":"2026-06-05T10:00:13","guid":{"rendered":"https:\/\/eba.com.ua\/?p=748035"},"modified":"2026-06-05T13:03:51","modified_gmt":"2026-06-05T10:03:51","slug":"bdo-v-ukrayini-audyt-vidpovidnosti-systemy-bezpeky-ens-dlya-globalnogo-onlajn-rytejlera-v-ispaniyi","status":"publish","type":"post","link":"https:\/\/eba.com.ua\/en\/bdo-v-ukrayini-audyt-vidpovidnosti-systemy-bezpeky-ens-dlya-globalnogo-onlajn-rytejlera-v-ispaniyi\/","title":{"rendered":"[:ua]BDO \u0432 \u0423\u043a\u0440\u0430\u0457\u043d\u0456: \u0430\u0443\u0434\u0438\u0442 \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u043e\u0441\u0442\u0456 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 ENS \u0434\u043b\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043d\u043b\u0430\u0439\u043d-\u0440\u0438\u0442\u0435\u0439\u043b\u0435\u0440\u0430 \u0432 \u0406\u0441\u043f\u0430\u043d\u0456\u0457[:en]BDO in Ukraine: Compliance Audit of an ENS Security System for a Global Online Retailer in Spain[:]"},"content":{"rendered":"

<\/p>\n

\"\"<\/p>\n

The team of BDO in Ukraine<\/strong> delivered an information security audit project for a subsidiary of a global online retailer operating in the Spanish market.<\/p>\n

The objective of the project was to assess <\/strong>the compliance of the security system<\/strong><\/a> with the requirements of Spain\u2019s National Security Framework (Esquema Nacional de Seguridad, ENS)<\/strong> and to determine the extent to which the existing information security management processes comply with applicable regulatory standards.<\/p>\n

Companies operating in the e\u2011commerce<\/strong> sector process large volumes of user data, financial information, and transactions. For this reason, the implementation of effective mechanisms to protect information systems is critical for such organizations.<\/p>\n

In the context of this project, the client was required to undergo a planned compliance assessment of its security systems against the requirements of ENS<\/strong> \u2014 Spain\u2019s National Security Framework (Esquema Nacional de Seguridad), which establishes standards for the protection of information systems.<\/p>\n

Meeting this requirement involves not only a formal review of documentation but also a comprehensive analysis of actual security management processes, technical configurations, and implemented controls.<\/p>\n

Prior to the commencement of the audit, the client faced several key challenges:<\/p>\n

\"\"<\/p>\n

BDO\u2019s approach to security system audits<\/strong><\/h4>\n

To deliver this project, the team of BDO in Ukraine<\/strong> applied a structured, phased approach to assessing the compliance of the client\u2019s security system.<\/p>\n

1) Collection of security system information<\/strong><\/p>\n

At the first stage, BDO professionals gathered baseline information on the existing information security management system. The analysis performed enabled the team to obtain a realistic view of how the security system operates and to identify areas requiring further review.<\/p>\n

2) Assessment of compliance with ENS requirements<\/strong><\/p>\n

At the second stage, BDO experts performed a detailed analysis of the collected information<\/strong> and benchmarked the client\u2019s actual practices against the requirements of Spain\u2019s National Security Framework. A tailored analytical approach enabled the identification of key risks and potential areas for improvement.<\/p>\n

3) Development of recommendations<\/strong><\/p>\n

The final stage of the project involved the development of recommendations to address the identified non\u2011compliance issues. BDO experts prepared a structured set of measures<\/strong>, which became the basis for the further enhancement of the client\u2019s security system.<\/p>\n

Audit results and client outcomes<\/strong><\/h4>\n

The security system audit provided the client with a comprehensive understanding of the current state of its security framework.<\/strong><\/p>\n

As a result of the project, the company obtained:<\/p>\n

\"\"<\/p>\n

    \n
  1. I<\/strong>dentifie<\/strong>d gaps<\/strong>
    \nA structured list of security weaknesses and gaps identified against ENS requirements.<\/li>\n
  2. Practical recommendations for improvement<\/strong>
    \nClear and actionable recommendations to address non\u2011compliance and strengthen cybersecurity.<\/li>\n
  3. Foundation for further development of the security system<\/strong>
    \nAudit results provided a basis for the continued improvement of the information security management system.<\/li>\n<\/ol>\n

    BDO in Ukraine<\/strong><\/a> supports organizations with information security audits<\/a>, providing relevant services and assessing compliance with international and national standards.<\/p>\n

    Our experts help organizations to:<\/p>\n