8 min read · DataRoad In summary NIS2 is in effect in Portugal through Decree-Law No. 125/2025 of December 4 (Legal Regime of Cybersecurity). It generally covers medium and large companies in the sectors
IT Maintenance and Support
This category brings together DataRoad's content on preventive IT maintenance, meaning scheduled visits and checks designed to detect and correct problems before they cause a breakdown or system outage. Unlike reactive support, which responds to an incident already underway, preventive maintenance includes tasks such as checking the status of disks and server ventilation, physical cleaning of equipment, validation of backups, controlled updating of operating systems and critical software, and reviewing error logs that might indicate an imminent failure. The articles gathered here explain the frequency with which DataRoad recommends these visits depending on the criticality of each client's infrastructure, and present cases where a preventive intervention prevented a multi-day outage that, under a purely reactive regime, would only have been detected after it had already impacted the business. This is a natural complement to any retainer contract or remote support, and not a standalone service. For the continuous monitoring service that underpins this schedule of visits, please consult 24/7 IT Monitoring and Maintenance.
MFA in the company (multi-factor authorisation): If you could only do one thing for your company's security this month, it should be this. Multi-factor authorisation (MFA) — asking for confirmation on your mobile phone in addition to your password — blocks the
The 4 phases of a cyberattack on a company: When a company wakes up with its files encrypted and a ransom demand on the screen, it feels like the attack happened that night. It is almost never like that. The attacker
Password manager in the company: Ask anyone in your company how many different passwords they use. The honest answer is "two or three, with variations". The email password is similar to the management software one,
Managed firewall or purchased firewall: "We have a firewall." It's the phrase we hear in almost every initial meeting, and it's almost always true: there's a box in the rack with the name of a security manufacturer.
5 signs that your IT infrastructure is not scaling: Businesses grow in leaps and bounds: ten more people in a quarter, a new office, a line of business that needs different software. The computer infrastructure grows
Training the team against phishing and deepfakes: Two years ago, it was enough to teach people to look out for strange Portuguese and poorly written email addresses. Today, the phishing email is well written, and the phone call is real.
7 internal cybersecurity policies: The majority of security incidents in SMEs do not start with a sophisticated attack. They start with someone who did what they thought was normal: reused the email password on the carrier's website,
7 min read · DataRoad In summary A classic VPN connects the remote computer to the entire company network. With a stolen password, the attacker gains the same access. The alternative is application access:
8 min read · DataRoad In short, Zero Trust means this: no one has access just because they are "inside" the network. Every access is verified — who they are, what equipment they have, what they are for. In a 10-person SME