{"id":5321,"date":"2025-11-24T09:13:00","date_gmt":"2025-11-24T09:13:00","guid":{"rendered":"https:\/\/www.oramix.pt\/?p=5321"},"modified":"2026-07-27T10:58:58","modified_gmt":"2026-07-27T10:58:58","slug":"cybersecurity-cannot-be-mandated-by-law","status":"publish","type":"post","link":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/","title":{"rendered":"Cybersecurity cannot be mandated by law"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The Portuguese Parliament has approved the proposal to transpose the European NIS2 Directive into national law. This decision brings Portugal into line with the European strategy to strengthen cybersecurity, particularly in sectors that ensure the functioning of society and the economy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, we should be under no illusion: legislation alone will not solve these problems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NIS2 provides a framework that requires organizations to approach security structurally. It is precisely this change in mindset that deserves consideration: how can legal obligations be transformed into practices that genuinely protect the business?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.itsecurity.pt\/news\/opinion\/a-ciberseguranca-nao-se-decreta-por-lei\">Read the full opinion article<\/a>. (in portuguese)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Portuguese Parliament has approved the proposal to transpose the European NIS2 Directive into national law. This decision brings Portugal into line with the European strategy to strengthen cybersecurity, particularly in sectors that ensure the functioning of society and the economy. However, we should be under no illusion: legislation alone will not solve these problems. [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":4328,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[32],"tags":[64],"class_list":["post-5321","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-clipping","tag-it-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cybersecurity cannot be mandated by law - Oramix<\/title>\n<meta name=\"description\" content=\"Read Carlos Caldeira\u2019s IT Security article on Portugal\u2019s transposition of NIS2 and why legislation alone is not enough.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cybersecurity cannot be mandated by law - Oramix\" \/>\n<meta property=\"og:description\" content=\"Read Carlos Caldeira\u2019s IT Security article on Portugal\u2019s transposition of NIS2 and why legislation alone is not enough.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/\" \/>\n<meta property=\"og:site_name\" content=\"Oramix\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-24T09:13:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-27T10:58:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site.png\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"780\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Joana Rodrigues\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joana Rodrigues\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/\"},\"author\":{\"name\":\"Joana Rodrigues\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/#\\\/schema\\\/person\\\/cde9a02ed0bc0b8a37c2600d5604817c\"},\"headline\":\"Cybersecurity cannot be mandated by law\",\"datePublished\":\"2025-11-24T09:13:00+00:00\",\"dateModified\":\"2026-07-27T10:58:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/\"},\"wordCount\":102,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.oramix.pt\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Site.png\",\"keywords\":[\"IT Security\"],\"articleSection\":[\"Clipping\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/\",\"url\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/\",\"name\":\"Cybersecurity cannot be mandated by law - Oramix\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.oramix.pt\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Site.png\",\"datePublished\":\"2025-11-24T09:13:00+00:00\",\"dateModified\":\"2026-07-27T10:58:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/#\\\/schema\\\/person\\\/cde9a02ed0bc0b8a37c2600d5604817c\"},\"description\":\"Read Carlos Caldeira\u2019s IT Security article on Portugal\u2019s transposition of NIS2 and why legislation alone is not enough.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.oramix.pt\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Site.png\",\"contentUrl\":\"https:\\\/\\\/www.oramix.pt\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/Site.png\",\"width\":770,\"height\":780},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/cybersecurity-cannot-be-mandated-by-law\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Knowledge\",\"item\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Clipping\",\"item\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/knowledge\\\/clipping\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Cybersecurity cannot be mandated by law\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/#website\",\"url\":\"https:\\\/\\\/www.oramix.pt\\\/\",\"name\":\"Oramix\",\"description\":\"Data management, cybersecurity and digital transformation by Oramix in Portugal\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.oramix.pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.oramix.pt\\\/#\\\/schema\\\/person\\\/cde9a02ed0bc0b8a37c2600d5604817c\",\"name\":\"Joana Rodrigues\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ec77e688f3bb7337a9d313206815eecc9ee4a23674bd162535179f3f92000ebb?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ec77e688f3bb7337a9d313206815eecc9ee4a23674bd162535179f3f92000ebb?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ec77e688f3bb7337a9d313206815eecc9ee4a23674bd162535179f3f92000ebb?s=96&d=mm&r=g\",\"caption\":\"Joana Rodrigues\"},\"url\":\"https:\\\/\\\/www.oramix.pt\\\/en\\\/author\\\/joana-rodrigues\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cybersecurity cannot be mandated by law - Oramix","description":"Read Carlos Caldeira\u2019s IT Security article on Portugal\u2019s transposition of NIS2 and why legislation alone is not enough.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/","og_locale":"en_US","og_type":"article","og_title":"Cybersecurity cannot be mandated by law - Oramix","og_description":"Read Carlos Caldeira\u2019s IT Security article on Portugal\u2019s transposition of NIS2 and why legislation alone is not enough.","og_url":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/","og_site_name":"Oramix","article_published_time":"2025-11-24T09:13:00+00:00","article_modified_time":"2026-07-27T10:58:58+00:00","og_image":[{"width":770,"height":780,"url":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site.png","type":"image\/png"}],"author":"Joana Rodrigues","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Joana Rodrigues","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#article","isPartOf":{"@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/"},"author":{"name":"Joana Rodrigues","@id":"https:\/\/www.oramix.pt\/#\/schema\/person\/cde9a02ed0bc0b8a37c2600d5604817c"},"headline":"Cybersecurity cannot be mandated by law","datePublished":"2025-11-24T09:13:00+00:00","dateModified":"2026-07-27T10:58:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/"},"wordCount":102,"commentCount":0,"image":{"@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#primaryimage"},"thumbnailUrl":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site.png","keywords":["IT Security"],"articleSection":["Clipping"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/","url":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/","name":"Cybersecurity cannot be mandated by law - Oramix","isPartOf":{"@id":"https:\/\/www.oramix.pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#primaryimage"},"image":{"@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#primaryimage"},"thumbnailUrl":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site.png","datePublished":"2025-11-24T09:13:00+00:00","dateModified":"2026-07-27T10:58:58+00:00","author":{"@id":"https:\/\/www.oramix.pt\/#\/schema\/person\/cde9a02ed0bc0b8a37c2600d5604817c"},"description":"Read Carlos Caldeira\u2019s IT Security article on Portugal\u2019s transposition of NIS2 and why legislation alone is not enough.","breadcrumb":{"@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#primaryimage","url":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site.png","contentUrl":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site.png","width":770,"height":780},{"@type":"BreadcrumbList","@id":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/cybersecurity-cannot-be-mandated-by-law\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.oramix.pt\/en\/"},{"@type":"ListItem","position":2,"name":"Knowledge","item":"https:\/\/www.oramix.pt\/en\/knowledge\/"},{"@type":"ListItem","position":3,"name":"Clipping","item":"https:\/\/www.oramix.pt\/en\/knowledge\/clipping\/"},{"@type":"ListItem","position":4,"name":"Cybersecurity cannot be mandated by law"}]},{"@type":"WebSite","@id":"https:\/\/www.oramix.pt\/#website","url":"https:\/\/www.oramix.pt\/","name":"Oramix","description":"Data management, cybersecurity and digital transformation by Oramix in Portugal","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.oramix.pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.oramix.pt\/#\/schema\/person\/cde9a02ed0bc0b8a37c2600d5604817c","name":"Joana Rodrigues","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ec77e688f3bb7337a9d313206815eecc9ee4a23674bd162535179f3f92000ebb?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ec77e688f3bb7337a9d313206815eecc9ee4a23674bd162535179f3f92000ebb?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ec77e688f3bb7337a9d313206815eecc9ee4a23674bd162535179f3f92000ebb?s=96&d=mm&r=g","caption":"Joana Rodrigues"},"url":"https:\/\/www.oramix.pt\/en\/author\/joana-rodrigues\/"}]}},"featured_image_src":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site-600x400.png","featured_image_src_square":"https:\/\/www.oramix.pt\/wp-content\/uploads\/2025\/11\/Site-600x600.png","author_info":{"display_name":"Joana Rodrigues","author_link":"https:\/\/www.oramix.pt\/en\/author\/joana-rodrigues\/"},"_links":{"self":[{"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/posts\/5321","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/comments?post=5321"}],"version-history":[{"count":1,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/posts\/5321\/revisions"}],"predecessor-version":[{"id":5322,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/posts\/5321\/revisions\/5322"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/media\/4328"}],"wp:attachment":[{"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/media?parent=5321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/categories?post=5321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.oramix.pt\/en\/wp-json\/wp\/v2\/tags?post=5321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}