“The President of the Republic has approved the diploma transposing Directive (EU) 2022/2555, concerning measures aimed at ensuring a high common level of cybersecurity in the Union,” announced the Presidency of the Republic on its official website, without providing further details.
On November 5, the Council of Ministers approved the decree-law establishing the new cybersecurity regime, aimed at defending against cyberattacks on public and private organizations.
According to the Minister of the Presidency, the diploma “requires public and private organizations to adopt measures to reduce their vulnerabilities” and to have “a set of responses” in place should such attacks occur.
António Leitão Amaro emphasized that the diploma sought to “avoid excessive contextual costs,” including the acceptance of private cybersecurity certificates, and empowers the national cybersecurity authority (National Cybersecurity Center) to oversee compliance.
The official also highlighted the creation of the ‘ethical hacking’ figure, which allows, under certain conditions, the decriminalization of “activities where individuals seek to identify system vulnerabilities in others,” which are then reported without personal gain.
Authorization for the Government to transpose the European directive had been granted by the Assembly of the Republic in October.
