Share

Cybersecurity cannot be mandated by law

24 Nov 2025 Clipping IT Security
Written by Carlos Caldeira

The Portuguese Parliament has approved the proposal to transpose the European NIS2 Directive into national law. This decision brings Portugal into line with the European strategy to strengthen cybersecurity, particularly in sectors that ensure the functioning of society and the economy.

However, we should be under no illusion: legislation alone will not solve these problems.

NIS2 provides a framework that requires organizations to approach security structurally. It is precisely this change in mindset that deserves consideration: how can legal obligations be transformed into practices that genuinely protect the business?

Read the full opinion article. (in portuguese)