Portuguese Official Journal, Series 1 — No. 108 — 5
June, 2019
use of new technologies. Therefore, the following lines of
action shall be adopted:
Develop and reinforce the cyber defence capacity to ensure
the conduction of military operations in cyberspace, ensuring
the country's freedom of action in the cyberspace and, where
necessary and determined, the proactive exploitation of the
cyberspace to prevent or hinder its hostile use against the
national interest;
Adapt, for crisis management purposes, the capabilities of
the Armed Forces, Security Forces and Services and other
public and private entities, with the objective of boosting an
integrated approach to the threats and risks of cyberspace
security;
Carry out an assessment of the needs for revision and
updating of legislation. Accordingly, the competent authorities
should take the necessary measures to enable them to prepare
such draft legislation as may be necessary, both in the area of
substantive criminal law and in procedural and institutional,
police and judicial cooperation, national and international
instruments;
Assess in the context of cyber-crime the need to adjust
criminal procedural rules to the global challenges it poses, and
in particular as regards possible cross-border access to data
(digital evidence), possible cooperation with foreign
communications operators and speeding up online
investigative actions, including those that may fall within the
context of covert actions under the law;
Consider updating the existing legal framework for data
retention and the legal framework for the seizure of e-mail and
other similar communications;
Enhance threat response capacity by maximizing the
synergies created by the cooperation and trust that exist
between computer security incident response teams, enabling
the creation of new teams of this nature in all public and
private bodies, with responsibility for the security of network
and information systems;
Promote, at the sectoral and business level, the creation of
outside operational and technical information sharing fora, a
coordinated response to security incidents and the production
of specific safety references, ensuring their connection with
their international counterparts, if any, and their alignment
with the relevant references;
Consolidate and promote the national capacity to know
cyberspace security threats, in a collaborative manner between
national authorities with responsibility in this area and with the
active participation of public and private bodies, thereby
producing and sharing aggregate knowledge that enable
anticipation of impacts, proactive action and better awareness
of the threat for all concerned;
Encourage and boost the participation of computer security
incident response teams in national and international
cyberspace security fora, benefiting from knowledge sharing
and peer confidence building.
2893
individual and collective capacities of the public and private
sector, academia and industry.
The task of creating these technological capacities lies
primarily with the National Scientific and Technological
System, including companies, public and private institutions,
within the framework of their national and international
commitments, assumed in fora, organizations and partnership
systems representing Portugal. Therefore, the following lines
of action shall be adopted:
Promote scientific production, development and innovation
in the various fields of cyberspace security with the aim of
maintaining and affirming national independence in this field;
Stimulate and leverage through appropriate funding the
country's scientific, technical and industrial capacities, with
particular emphasis on critical domains and emerging
technologies, giving priority to the development of
cybersecurity technologies and meeting identified innovation
needs;
Support the stakeholders participation in research,
development and innovation in international projects;
Enhance the synergies arising from the national participation
in the various international fora in this field and the presence
in the national territory of international organizations
dedicated to research, development and innovation in this area;
Enhance national synergies and address ongoing cooperative
efforts in international organizations of which Portugal is an
integral part, notably within the framework of the European
Union (pooling & sharing), the North Atlantic Treaty
Organization (smart defence) and multinational initiatives to,
in collaboration with universities, research centres and
industry, to develop technological solutions of interest for dual
civil and military use;
Promote the development of secure by design and secure by
default products, systems and services;
Participate in the work of national and international technical
committees to implement internationally accepted technical
standards and specifications applicable to the security of
network and information systems, without imposing or
discriminating in favour of the use of a particular type of
technology;
Promote innovation combined with the State’s cybersecurity
through the most effective information and communication
technologies, in accordance with other relevant national
strategies, notably the Strategy for Digital Transformation in
Public Administration — ICT 2020 Strategy as well as the
“Digital Development Strategy National Digital Skills
Initiative e.2030 — INCoDe.2030”;
Ensure the articulation of public and private entities,
academia and business, namely, the entrepreneurial ecosystem
and clusters, promoting the technological innovation in the
country;
Promote foreign investment in cyberspace security.
Axis 6 —
Axis 5 —
Research, development and innovation:
Building technological capabilities in the field of
cybersecurity is key in this Strategy for a sustained
development and the relevant observation of the future. As a
result, it aims to strengthen, support and promote the national
research, development and innovation potential of cuttingedge cybersecurity processes and technologies, based on the
National and international cooperation:
In a highly interconnected and interdependent world,
cyberspace security requires a strong cooperation and
collaboration between national and international allies and
partners, building on the development of mutual trust. This is
a key factor in enhancing the resilience of the network in which
all co-workers participate. As a result, this Strategy calls for
an enhanced duty of cooperation between national structures
and entities with responsibility in areas contributing to the