Portuguese Official Journal, Series 1 — No. 108 — 5 June,
2019
2890
propagandistic and radicalizing content on such services and
platforms.
Regarding cyberspace activism (hacktivism), a phenomenon
with apparent political motivations or serving a cause, which
in the generality of cases means the application of methods for
the disruption of systems, exfiltration, and massive public
disclosure of individual data, there is a dormant potential of
threat agents with the specialized capabilities adequate to
perform acts of major disruption of network and information
systems.
The multiplication of available learning resources and userfriendly tools has increased the number of intentional attacks
on network and information systems by various actors. Many
of the aforementioned threat agents find in cyberspace a stage
for action, facilitated by a set of vulnerabilities from which it
suffers.
The identification of these vulnerabilities, coupled with the
weak cybersecurity culture and awareness of individual
responsibilities in this field, as well as the insufficient digital
maturity to address the security needs in both the public and
private sectors, are the main weaknesses that need to be solved.
Alongside this reality, the difficulty in training, maintaining
and attracting human and financial resources to monitor the
rapid technological evolution and the concomitant impact on
life in society represents an additional national vulnerability,
requires a strong investment to be tackled, innovative
networking collaboration models and an increase in research,
development and innovation.
There is also a need to strengthen the coordination and
strategic and operational coordination of national entities
involved in the security of cyberspace in order to safeguard the
efficient and effective national crisis management.
3 — Vision
This Strategy sets the following vision for 2023:
Portugal to be a safe and prosperous country through
innovative, inclusive and resilient action that preserves the
fundamental values of the democratic rule of law and ensures
the regular functioning of institutions corresponding to the
digital evolution of society.
4 — Strategic Objectives
Strategic Objective 1 — Maximize Resilience:
Strengthen and guarantee the national digital resilience by
enhancing inclusion and networking in order to safeguard the
security of cyberspace of national interest against threats that
may compromise or cause the disruption of the network and
information systems essential to society.
Strategic Objective 2 — Promote Innovation:
Foster and enhance national innovation capacity by
affirming the cyberspace as a domain for the economic, social
and cultural development and prosperity.
Strategic Objective 3 — Generate and guarantee resources:
Contribute to obtain and guarantee the allocation of adequate
resources for building and sustaining the national capacity on
cyberspace security.
5 — Axes
The implications and needs associated with each of the
strategic objectives make it possible to define a general and
specific approach, translated into six intervention axes, which
form concrete lines of action aimed at reinforcing the national
strategic potential in cyberspace by increasing its security,
namely:
Axis 1 —
Axis 2 —
Axis 3 —
Axis 4 —
crime;
Axis 5 —
Axis 6 —
Axis 1 —
Cyberspace security structure;
Prevention, education and awareness;
Cyberspace and infrastructures protection;
Response to threats and combating cyberResearch, development and innovation;
National and international cooperation.
Cyberspace Security Structure:
The complexity and scope of the cyberspace security
challenges require a strong and transversal leadership and
governance, an agile, quick and effective operational
coordination, capacity to respond and safeguard the national
interests and, above all, an involvement of resources,
knowledge and competences. Thus, within this axis, the
following lines of action shall be adopted:
Consolidate the national structure contained in Law No.
46/2018 of 13 August, reinforcing the Superior Council for
Cyberspace Security as a specific consultative body for the
Prime Minister to ensure the political-strategic coordination
for cyberspace security, with representatives of all
stakeholders to ensure a transversal and inclusive approach to
policies and initiatives developed by the various entities with
responsibilities on this area;
Strengthen the National Cybersecurity Centre as the
National Cybersecurity Authority and, as a result, as the
national single point of contact for international cybersecurity
cooperation purposes, without prejudice to the legal
attributions of other entities, namely the Public Prosecutor and
the Criminal Police, concerning international cooperation in
criminal matters, the Armed Forces in cyber defence, the
Secretary-General of the Information System of the
Portuguese Republic on the production of national and
external security information and the Secretary-General of the
Internal Security System regarding the Single Point of Contact
on international police cooperation, alert situations and quick
response to internal security threats;
Strengthen the national cyber defence capacity to maximize
the resilience of the Armed Forces to deal with significant
incidents or cyber-attacks that affect national interests and
sovereignty; all means should be used to respond to cyberattacks, including offensive cyberspace capabilities, proving to
be essential a close liaison and coordination with the various
relevant actors in case of incidents;
Strengthen the national cybersecurity capacity to maximize
the resilience of the Security Forces and Services, to address
significant incidents or cyber-attacks within their attributions,
being fundamental a close connection and coordination with
the various relevant actors in cases of incidents;
Deepen the dual use of cyber defence capabilities within
military operations and national cybersecurity by developing
and consolidating an information sharing system at various
decision-making levels and thresholds;
Promote a greater articulation and coordination of the
relevant entities in the areas of cyberspace security, notably
through the creation of synergies with the entities that are in