The provider can request the CCI to qualify its services by uploading, on the Pinakes platform, the two documents provided by the auditor. These documents cannot be older than one month from the date of the audit.


The rating is granted based on compliance with the applicable controls, and is determined for the following modalities:

  • Global Rating, defined with three letters indicating the levels obtained in the Confidentiality, Integrity and Availability dimensions

  • Rating for each section

  • Domain rating

In order to obtain a certain level in each of the dimensions, it's required the joint fulfillment of:

  • 100% of the applicable Priority 1 controls at that level, of the General controls and of the corresponding dimension.

  • 85% of the applicable Priority 2 controls at that level, of the General controls and of the corresponding dimension.

  • 50% of the applicable Priority 3 controls at that level, of the General controls and of the corresponding dimension.

The qualification of each section is made up of two values:

  • BASE Result: The level at which 100% of the applicable controls are met

  • WEIGHTED result: The level at which 100% of the applicable controls of Priority 1 are fulfilled, provided that the number of controls not fulfilled of priorities 2 and 3 is equal to or less than 2. In this case, the letter of the level obtained it will be followed by the '-' sign.

The rating of each domain, in base and weighted mode, is the lowest of those obtained for the sections that compose it.

The CCI obtains these ratings from the information uploaded to the platform by the provider. After their communication and agreement with the provider, they will be published for consultation by the adhered entities.

The ratings will be valid for a year, counting from the date of the qualification request submitted by the supplier. However, the supplier may submit modifying reports, resulting from partial audits, which may lead to the modification of the rating, maintaining the initial validity.






If you have more questions about PINAKES or need additional information about the qualification process,
contact us


In the Financial Sector, Pinakes is the solution

by means of LEET Security methodology.



#ConveyTrust

#SealYourSecurity