// Free guide · PDF · 6 pages
20 OT questions for NIS2: a self-assessment for the plant network.
A practical guide for the cybersecurity officer, the plant director and the IT/OT lead. Answer Yes, Partly or No to 20 questions and you get a first list of priorities up to June 2028.
Direct download, no sign-up or email.
What it covers
- What Decree-Law 125/2025 means for a plant with OT, and the dates that matter.
- 20 questions in 5 groups: governance, asset and flow inventory, segmentation and remote access, monitoring and incident notification, recovery and supply chain.
- For each question, why it matters and what a good answer looks like.
- A summary grid and a next-actions table to fill in with your team.
- Official sources: Diário da República, CNCS, ENISA and the IEC 62443 series.
Who it is for
Mid-sized industrial companies in Portugal in scope of NIS2: food, automotive components, metalworking, machinery, plastics, waste and water. Also useful for integrators and MSPs who need to discuss the OT network with their clients.
After the guide
If several answers are Partly or No, that is normal. The usual next step is to learn what is on the network, close down remote access and gain visibility. You can do it with your team, with your integrator or with us, with a fixed scope and price.
Frequently asked questions
Does the guide replace legal advice?
No. It is general technical information. Your entity's classification should be confirmed with legal support and on the CNCS platform.
Do I need to leave my email?
No. The PDF downloads directly and there is no tracking.
Last updated: November 2026.