CAE 62201: IT Consultancy — What It Covers and Why It Has Changed

The biggest risk of a trip is not the hotel Wi-Fi; it’s the laptop that’s lost without a password — see the checklist before leaving and the procedure in case of loss.

Exposed management panels, outdated VPNs, and forgotten subdomains are open doors — see how to measure what the internet sees of your company and close the essentials.

The NOC monitors whether everything is working, the SOC monitors whether someone is attacking — and an SME needs both responses, not two screens.

Microsoft owns the building, but the keys are theirs: see what the shared responsibility model leaves the company to handle and how to verify it.

Article 32 of the GDPR requires specific technical measures — these are the 10 steps that an SME's IT must ensure, including the plan for the 72 hours.

Your team's emails are almost certainly leaking data from other sites — see how to check the entire domain and prevent it from opening a work account.

Equipment, licenses, accounts, contracts and data: without inventory there is no credible budget, proven security or NIS2 compliance.

If the only administrator of Microsoft 365 is locked out, the emergency accounts are the company's backup key.

PC in the cloud is ideal for consultants, seasonal workers and teams without an office — and a poor choice for video, CAD or weak connections.

A backup is only as good as the replacement: the 30-minute test that any administration may require from the IT provider.

With multiple locations, security is worth what the most forgotten store is worth — the central management applies the same rule to all.

Three email attacks that bypass Microsoft 365’s basic protection — and the simple measures that stop them.

A practical rule of thumb for each type of equipment is to consider whether to keep and replace the equipment, and what to do with the old equipment.

What needs to be in place for a Mac park to be manageable, encrypted, up-to-date, and well-supported — explained without jargon.

Before generalizing ChatGPT or linking it to Copilot, define approved tools, prohibited data, and permissions — five rules that fit on a page.

An unrenewed domain or an expired certificate stops the website and email without notice. See how to ensure that no expiration date ever comes back.

Minutes lost per day × team = euros per year: the account of a slow computer and its impact on the day-to-day work of the team.

Microsoft keeps the service running, but the data is the responsibility of your company — see the actual recovery timelines and what you should have.

What to update now, what to expect, and how a monthly maintenance window prevents the “I’ll do it later” mindset from turning into a day of downtime.

Six questions to determine whether NIS2 applies to your company, the deadlines and fines confirmed in Decree-Law No. 125/2025, and the technical measures to be implemented.

Multi-factor authentication renders a stolen password useless. Where to enable it first, what methods to use, and a 2-week plan to implement it without locking out the team.

An attack on an SME doesn't happen in an instant: reconnaissance, entry, expansion and impact. What happens at each stage and which measure stops the attack at each point.

What an enterprise password manager solves, the criteria for choosing one, and how to implement it in 3 weeks without a team mutiny.

Buying a firewall is just the start, not the end. We compare purchased firewalls and managed firewalls in terms of cost, risk and effort.

Server at its limit, Wi-Fi that drops when the room fills up, a rack that nobody wants to touch: the 5 signs that the infrastructure is no longer keeping up with the company.

Phishing, cloned voice calls and fake videos: how to train the team with short sessions, simulations and rules that work even when the fraud is convincing.

The 7 cybersecurity policies that an SME should have in writing, with the essentials of each in a few lines.

A VPN connects the laptop to the entire network; app access only opens what each person needs — and sometimes even a well-configured VPN does.

Zero Trust is not a product: it is four steps — accounts, equipment, network, and minimal access — that an SME takes in about three months.

Windows 10 stopped receiving security updates in October 2025. The three options for businesses and how to decide without stopping operations.

Practical 8-area checklist for auditing your company's IT asset base: inventory, backups, access control, network, security and contracts.

Reactive support fixes things when they stop; proactive monitoring alerts you days before. Three real-world scenarios, what is measured, and why a tool is not a service.

An example in euros for a 20-person company shows why repairing it only when it breaks down is more expensive than it seems.

Looking to hire IT support? Use this checklist to choose the right company: SLAs, security, backups, proximity, transparency and no lock-in contracts.

Slow computers, network failures, no backups? Here are 10 clear signs that your business needs professional IT support — before a problem brings your business to a standstill.

What is an SLA in IT support? We explain response and resolution times, priority levels and how a written SLA protects your business.

The full cost of an in-house IT technician — between €30,300 and €40,700 per year in our example — compared to an outsourcing fee.

How much does IT support cost for a business in Portugal? We explain the pricing models (fixed-term contract, hourly rate, per workstation), what affects the cost and how to compare quotes.