{"id":2191,"date":"2025-11-06T17:55:24","date_gmt":"2025-11-06T17:55:24","guid":{"rendered":"https:\/\/incendio.pt\/mse\/?p=2191"},"modified":"2026-02-08T17:59:31","modified_gmt":"2026-02-08T17:59:31","slug":"cer-e-nis2","status":"publish","type":"post","link":"https:\/\/incendio.pt\/mse\/cer-e-nis2\/","title":{"rendered":"CER e NIS2"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><strong>CER (Diretiva de Resili\u00eancia de Entidades Cr\u00edticas)<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Diretiva (UE) 2022\/2557<\/strong> &#8211; Relativa \u00e0 resili\u00eancia das entidades cr\u00edticas<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Transposi\u00e7\u00e3o em Portugal:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Decreto-Lei n.\u00ba 22\/2025<\/strong> (publicado a 19 de mar\u00e7o de 2025)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Objetivo:<\/strong> Refor\u00e7ar a capacidade de prote\u00e7\u00e3o de infraestruturas essenciais contra amea\u00e7as <strong>f\u00edsicas e n\u00e3o-cibern\u00e9ticas<\/strong>:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cat\u00e1strofes naturais<\/li>\n\n\n\n<li>Ataques terroristas<\/li>\n\n\n\n<li>Emerg\u00eancias de sa\u00fade p\u00fablica<\/li>\n\n\n\n<li>Sabotagem f\u00edsica<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Setores Abrangidos:<\/strong> Energia, transportes, sa\u00fade, \u00e1gua pot\u00e1vel, \u00e1guas residuais, espa\u00e7o, banca, mercados financeiros, seguros, infraestruturas digitais, administra\u00e7\u00e3o p\u00fablica<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Obriga\u00e7\u00f5es das Entidades Cr\u00edticas:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Avalia\u00e7\u00e3o de risco (art.\u00ba 23.\u00ba DL 22\/2025)<\/li>\n\n\n\n<li>Plano de resili\u00eancia (art.\u00ba 24.\u00ba) &#8211; revisto a cada 4 anos<\/li>\n\n\n\n<li>Prote\u00e7\u00e3o f\u00edsica das infraestruturas cr\u00edticas<\/li>\n\n\n\n<li>Identifica\u00e7\u00e3o de pessoal com fun\u00e7\u00f5es cr\u00edticas<\/li>\n\n\n\n<li>Forma\u00e7\u00e3o e treino de recursos humanos<\/li>\n\n\n\n<li>Notifica\u00e7\u00e3o de incidentes \u00e0s autoridades<\/li>\n\n\n\n<li>Designa\u00e7\u00e3o de agente de liga\u00e7\u00e3o (art.\u00ba 27.\u00ba e 31.\u00ba)<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Prazo:<\/strong> Estrat\u00e9gia Nacional de Resili\u00eancia e Avalia\u00e7\u00e3o Nacional de Risco devem estar definidas at\u00e9 2026<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>NIS2 (Diretiva de Ciberseguran\u00e7a)<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Diretiva (UE) 2022\/2555<\/strong> &#8211; Medidas para assegurar elevado n\u00edvel comum de ciberseguran\u00e7a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Transposi\u00e7\u00e3o em Portugal:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Lei n.\u00ba 59\/2025<\/strong> (publicada em outubro de 2025) &#8211; autoriza o Governo a transpor<\/li>\n\n\n\n<li>Prazo de transposi\u00e7\u00e3o: <strong>180 dias<\/strong> ap\u00f3s publica\u00e7\u00e3o (aproximadamente abril 2026)<\/li>\n\n\n\n<li>Substituir\u00e1 a Lei n.\u00ba 46\/2018 (regime anterior &#8211; NIS1)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Objetivo:<\/strong> Prote\u00e7\u00e3o contra <strong>amea\u00e7as cibern\u00e9ticas<\/strong> e riscos de seguran\u00e7a de redes e sistemas de informa\u00e7\u00e3o<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Categorias de Entidades:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Entidades Essenciais<\/strong> &#8211; setores cr\u00edticos (energia, transportes, sa\u00fade, banca, \u00e1gua, administra\u00e7\u00e3o p\u00fablica, espa\u00e7o, infraestruturas digitais)<\/li>\n\n\n\n<li><strong>Entidades Importantes<\/strong> &#8211; setores de alta criticidade<\/li>\n\n\n\n<li><strong>Entidades P\u00fablicas Relevantes<\/strong> &#8211; administra\u00e7\u00e3o p\u00fablica e tribunais<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Crit\u00e9rios de Aplica\u00e7\u00e3o:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Empresas com volume de neg\u00f3cios anual &gt; \u20ac43M<\/li>\n\n\n\n<li>Ou 250+ colaboradores<\/li>\n\n\n\n<li>Operadores de servi\u00e7os essenciais (independentemente do tamanho)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Obriga\u00e7\u00f5es Principais:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Gest\u00e3o de Riscos:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Pol\u00edticas de an\u00e1lise e avalia\u00e7\u00e3o de riscos<\/li>\n\n\n\n<li>Gest\u00e3o de incidentes<\/li>\n\n\n\n<li>Continuidade de neg\u00f3cio e gest\u00e3o de crises<\/li>\n\n\n\n<li>Seguran\u00e7a da cadeia de abastecimento<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Medidas T\u00e9cnicas:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Pol\u00edticas de criptografia<\/li>\n\n\n\n<li>Controlo de acessos<\/li>\n\n\n\n<li>Gest\u00e3o de vulnerabilidades<\/li>\n\n\n\n<li>Backup e recupera\u00e7\u00e3o de desastres<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Notifica\u00e7\u00e3o de Incidentes:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Alerta precoce: 24h ap\u00f3s dete\u00e7\u00e3o<\/li>\n\n\n\n<li>Notifica\u00e7\u00e3o de incidente: 72h<\/li>\n\n\n\n<li>Relat\u00f3rio final: 1 m\u00eas ap\u00f3s incidente<\/li>\n\n\n\n<li>Autoridade: <strong>CNCS (Centro Nacional de Ciberseguran\u00e7a)<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Responsabilidade da Gest\u00e3o:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Aprova\u00e7\u00e3o de medidas de ciberseguran\u00e7a<\/li>\n\n\n\n<li>Supervis\u00e3o da implementa\u00e7\u00e3o<\/li>\n\n\n\n<li>Forma\u00e7\u00e3o regular em ciberseguran\u00e7a<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>San\u00e7\u00f5es:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Multas at\u00e9 <strong>\u20ac10 milh\u00f5es<\/strong> ou <strong>2% do volume de neg\u00f3cios anual global<\/strong><\/li>\n\n\n\n<li>Responsabiliza\u00e7\u00e3o individual da gest\u00e3o de topo<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Quadro Institucional:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cria\u00e7\u00e3o do <strong>Conselho Superior de Seguran\u00e7a do Ciberespa\u00e7o<\/strong><\/li>\n\n\n\n<li>Refor\u00e7o das compet\u00eancias do <strong>CNCS<\/strong><\/li>\n\n\n\n<li>Plataforma eletr\u00f3nica de registo (60 dias para inscri\u00e7\u00e3o ap\u00f3s publica\u00e7\u00e3o)<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>IMPORTANTE:<\/strong> Entidades podem estar sujeitas a <strong>ambas as diretivas<\/strong> simultaneamente &#8211; devendo garantir conformidade com CER para incidentes f\u00edsicos e NIS2 para incidentes cibern\u00e9ticos.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CER (Diretiva de Resili\u00eancia de Entidades Cr\u00edticas) Diretiva (UE) 2022\/2557 &#8211; Relativa \u00e0 resili\u00eancia das entidades cr\u00edticas Transposi\u00e7\u00e3o em Portugal: Objetivo: Refor\u00e7ar a capacidade de prote\u00e7\u00e3o de infraestruturas essenciais contra amea\u00e7as f\u00edsicas e n\u00e3o-cibern\u00e9ticas: Setores Abrangidos: Energia, transportes, sa\u00fade, \u00e1gua pot\u00e1vel, \u00e1guas residuais, espa\u00e7o, banca, mercados financeiros, seguros, infraestruturas digitais, administra\u00e7\u00e3o p\u00fablica Obriga\u00e7\u00f5es das Entidades [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2423,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[],"class_list":["post-2191","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ciberseguranca"],"image_feature":"https:\/\/incendio.pt\/mse\/wp-content\/uploads\/CIBER_CER_NIS2.png","author_name":"gvb","_links":{"self":[{"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/posts\/2191","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/comments?post=2191"}],"version-history":[{"count":2,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/posts\/2191\/revisions"}],"predecessor-version":[{"id":2282,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/posts\/2191\/revisions\/2282"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/media\/2423"}],"wp:attachment":[{"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/media?parent=2191"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/categories?post=2191"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/incendio.pt\/mse\/wp-json\/wp\/v2\/tags?post=2191"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}