NIS2 enters into force in the EU
Directive (EU) 2022/2555, establishing the new European cybersecurity framework, enters into force.
Suppliers · Dependencies · Supply chain
Your security also depends on those who provide your services.
From obligation to implementation. From implementation to evidence. From evidence to continuity.
Understand critical dependencies and treat third-party risk as an integral part of your organization's security and continuity.
NIS2 · Portugal · MyCiber
The self-identification period is under way.
NIS2 has been transposed into Portuguese law and the MyCiber platform is operational. Organizations already operating are within the self-identification window. Starting early allows the framework, representation, data and evidence to be checked before submission.
60-business-day window — MyCiber self-identification
Progress is updated automatically according to the device date.
—% elapsed
Current date
Business days elapsed— / 60
Business days remaining—
From the European NIS2 Directive to self-identification in Portugal
Swipe horizontally on smaller screens.
European transposition deadline
The deadline for Member States to transpose NIS2 into national law expires.
Decree-Law no. 125/2025
Portugal publishes the law transposing NIS2 and approving the Cybersecurity Legal Framework.
New framework enters into force
The new Portuguese cybersecurity legal framework becomes applicable.
Regulation no. 756/2026
The implementing regulation establishes rules on qualification, risk, measures, evidence and MyCiber.
MyCiber becomes operational
The platform begins supporting self-identification and the qualification procedure.
60th reference business day
End of the announced window for organizations already operating when the framework entered into force.
Understand the MyCiber pathwayPrepare self-identificationRead practical guidance
Informative reference; it does not replace confirmation applicable to the organization. Sources: Decree-Law no. 125/2025 (PT), Regulation no. 756/2026 (PT), official MyCiber FAQ (PT) and Article 87 of the Portuguese Administrative Procedure Code (PT).
Initial RJCS guidance
Identify the pathway to validate before self-identification.
Answer only what you know. The tool organizes relevant elements, highlights uncertainty and provides preliminary guidance — never an official qualification.
First understand the process, its stages and data safeguards →
Step 1 of 5
Preliminary guidance
Further analysisYour framework needs to be validated.
What determined this result
Limit of this check
This result organizes the information provided. It is not an official qualification, legal opinion or substitute for self-identification and the competent authority's decision.
Validation request
Turn the result into a supported process.
Identify yourself to request a Cyberprotech review. Before submission, we show exactly which answers and data will be associated with the process.
After self-identification
The deadline is a milestone. The ability to demonstrate starts earlier.
Submission through MyCiber begins a qualification and implementation pathway. The useful work is to turn the framework into responsibilities, measures, documents and evidence the organization can maintain.
- 01Confirm the framework
Validate the organization, sector, size, services and representation.
- 02Prepare the decision
Define owners, sources, assumptions and internal approvals.
- 03Organize the evidence
Connect every obligation to measures, documents, implementation and proof.
Before choosing a solution
Can your organization prove it is prepared?
Are cybersecurity responsibilities and decision-making authority clearly assigned?
Can you identify the systems, services and third parties your operations depend on?
Can you locate the evidence supporting each implemented measure?
Local Public Sector
Four contexts. One shared requirement: keeping public services secure and demonstrable.
The framework, dependencies and priorities are not the same for every organization. We organize the starting point around its institutional and operational reality, without anticipating qualification by the competent authority.
01
Municipalities
Governance, citizen services, digital dependencies, suppliers and municipal continuity.
Explore pathway →02Parishes and parish unions
Proportionate measures, shared systems, access, backups, capability building and continuity of public service.
Explore pathway →03Municipal companies
Sector activity, independent governance, operational systems, third parties and organization-specific evidence.
Explore pathway →04Municipal services and water
Essential services, IT and OT environments, remote access, supply chain and recovery.
Explore pathway →Knowledge Center
From legal requirement to practical decision.
Structured content for people, search engines and AI systems, supported by context, primary sources and editorial review.
documents and proof into a clear pathway.
Framework
Portuguese Cybersecurity Legal Framework
Practical guidance on scope, responsibilities, obligations and implementation in Portugal.
Learn more ImplementationFrom requirement to evidence
Connect obligations, risks, measures, owners, documents and verifiable evidence.
Learn more PathwayMyCiber
Registration, self-identification, qualification, designated roles, evidence and practical guidance.
Learn moreResource Library
Knowledge designed to be applied.
Guides, templates and tools with proportionate access, metadata, versions and documented sources.
Open the LibraryGuides
Practical explanations and implementation pathways
Checklists
Verification lists by obligation and context
Templates
Document structures and working templates
Tools
Matrices, flowcharts and operational resources
How we work
From obligation to the capability to decide, deliver and demonstrate.
A continuous pathway connecting governance, technical implementation, operations and evidence, with professional responsibility at every decision point.
- 01
Frame
Confirm the organization, sector, size, services, assumptions and priorities without anticipating official decisions.
- 02
Govern
Define who decides, delivers, oversees, reports and maintains availability, with clear authority and boundaries.
- 03
Implement
Turn requirements into measures, owners, deadlines, configurations, documents and acceptance criteria.
- 04
Operate
Integrate monitoring, support, triage, incident response and continuity into real operations.
- 05
Demonstrate and improve
Connect obligations, risks, measures, delivery and evidence; measure, test, correct and evolve.
Implementation
When knowledge alone is no longer enough.
Cyberprotech steps in when obligations and priorities need to become verifiable operations.
CyberComply™
A platform supporting continuous compliance, evidence, documentation and roadmaps.
Learn more in Portuguese →MyCiber Assessment
Understand the starting point, priorities and an actionable plan.
Learn more in Portuguese →CISOaaS
Cybersecurity governance and ongoing organizational capability.
Learn more in Portuguese →PCPaaS
Reception, triage, contact activation and escalation of alerts, notifications and incidents.
Learn more in Portuguese →SOC and CSIRT
Monitoring, incident response and coordinated operational decisions.
Learn more in Portuguese →Training
Capability building aligned with roles, risks and obligations.
Learn more in Portuguese →Cyberprotech Academy
Digital learning paths, content, sessions and capability follow-up.
Visit platform ↗Capabilities work better when they share context.
Explore the ecosystem
See how governance, implementation, operations and response connect in a modular architecture.
Incident notification and response
An incident cannot wait for a complicated process.
A clear entry point for triage and rapid professional support, remotely or on site, according to impact, urgency and organizational context.
This support request does not replace official notification. Where applicable, we help prepare information for MyCiber or the channel designated by the competent authority.
Rapid triage
We gather essential information, assess impact and help establish the first priorities.
Remote support
Technical support and remote coordination to accelerate containment, evidence gathering and decisions.
On-site support
On-site intervention when severity, affected systems or local coordination require it.
Clients
Trust built through real work.
Organizations of different sizes and sectors that have trusted Cyberprotech to address concrete needs.
Meet our clients →
Each relationship has its own scope. Inclusion here does not necessarily indicate a currently active contractual relationship.
Next step
Not sure where to begin?
An initial conversation helps identify your organization's context, risks and first priorities.