Astrea is a consultancy specializing in electronic signature and cryptography, especially as it applies to the domains of eGovernment and eCommerce, with experience since 1996. The firm has a strong orientation to regulatory compliance, particularly sensitive in the provision of certification services and electronic procedures of government. The dual electronic signature legislation in Spain, with general rules and special rules for the public sector and the recent emergence of National Insurance Scheme, has provided exciting new opportunities for mass digitization of procedures, but has also increased management complexity of the systems and the need to ensure alignment with the applicable solutions. In this regard, the National Insurance Scheme imposes a number of document security obligations applicable to business applications, transmission and archival records, among which the need for electronic signature policies for different types of electronic documents they manage. To help companies and government to fulfill its legal obligations, Astrea has built a library of document security policy, comprising eight key rules that starting from a higher standard for electronic document security, and based on safety standards and managing cryptographic keys and certificates, addresses the key elements in electronic signatures, authentication, encryption and electronic evidence of documents and administrative records