NIS2 explained for SMEs: Most SME managers have heard of NIS2 as "that European cybersecurity law for large companies". Half of that sentence is wrong. NIS2 is in fact a European directive,
IT Maintenance and Support
This category brings together DataRoad's content on preventive IT maintenance, meaning scheduled visits and checks designed to detect and correct problems before they cause a breakdown or system outage. Unlike reactive support, which responds to an incident already underway, preventive maintenance includes tasks such as checking the status of disks and server ventilation, physical cleaning of equipment, validation of backups, controlled updating of operating systems and critical software, and reviewing error logs that might indicate an imminent failure. The articles gathered here explain the frequency with which DataRoad recommends these visits depending on the criticality of each client's infrastructure, and present cases where a preventive intervention prevented a multi-day outage that, under a purely reactive regime, would only have been detected after it had already impacted the business. This is a natural complement to any retainer contract or remote support, and not a standalone service. For the continuous monitoring service that underpins this schedule of visits, please consult 24/7 IT Monitoring and Maintenance.
MFA in the company (multi-factor authorisation): If you could only do one thing for your company's security this month, it should be this. Multi-factor authorisation (MFA) — asking for confirmation on your mobile phone in addition to your password — blocks the
The 4 phases of a cyberattack on a company: When a company wakes up with its files encrypted and a ransom demand on the screen, it feels like the attack happened that night. It is almost never like that. The attacker
Password manager in the company: Ask anyone in your company how many different passwords they use. The honest answer is "two or three, with variations". The email password is similar to the management software one,
Managed firewall or purchased firewall: "We have a firewall." It's the phrase we hear in almost every initial meeting, and it's almost always true: there's a box in the rack with the name of a security manufacturer.
5 signs that your IT infrastructure is not scaling: Businesses grow in leaps and bounds: ten more people in a quarter, a new office, a line of business that needs different software. The computer infrastructure grows
Treinar a equipa contra phishing e deepfakes: Há dois anos bastava ensinar as pessoas a reparar no português estranho e no endereço de e-mail mal escrito. Hoje o e-mail de phishing está bem escrito, a chamada telefónica
7 políticas internas de cibersegurança: A maioria dos incidentes de segurança em PME não começa com um ataque sofisticado. Começa com alguém que fez o que achou normal: reutilizou a password do e-mail no site da transportadora,
Acesso remoto seguro à equipa: Em 2020 quase todas as empresas resolveram o teletrabalho da mesma maneira: uma VPN na firewall, um utilizador e uma password por colaborador, e toda a gente passou a "estar no escritório"
Zero Trust em 4 passos para PME: "Zero Trust" aparece em todas as apresentações de fabricantes de segurança e quase sempre com um preço de seis dígitos agarrado. Para uma PME portuguesa isso soa a coisa de