The new Cybersecurity Legal Regimeapproved by the Council of Ministers in November, is under public consultation since last Friday, November 22nd, for a period that will end on December 14th.
The Government approved a proposal for a legislative authorization law – already accompanied by the respective proposal for an authorized decree-law – which transposes into the national legal order a community directive that aims to ensure “a high common level of cybersecurity” throughout the European Union. Outside of the new requirements are the public entities in the fields of national security, public security, defense and intelligence services. The Bank of Portugal, the Securities Market Commission and the Insurance and Pension Funds Supervisory Authority are also not covered.
The new regime comes to deepen three instruments identified as “fundamental” for public cybersecurity policies. They are the National Cyberspace Security Strategy, defining national strategic priorities and objectives in matters of cybersecurity; the National Plan for Response to Large-Scale Cybersecurity Crisis and Incidents, regulating and improving the management of this type of incident; and the National Reference Framework for Cybersecurity, which will bring together and allow the dissemination of norms, standards and good practices in Cybersecurity management.
On the other hand, the National Cybersecurity Center (CNCS) reinforces its role as national cybersecurity authority, highlighting the establishment of “sectoral” and “special” supervisory authorities, which exercise supervision over specific sectors of the economy.
An interoperability system will facilitate the transmission of information between the various entities competent in cybersecurity, including sharing contributions in responding to incidents. The idea is always “prevention and early detection, as well as mitigation, repression and accountability in the case of cyber threats”, reads the preamble of the proposed law.
It is also expected, and with the same objective, that there will be collaboration between public and private entities.
Source: www.jornaldenegocios.pt
