A new cybersecurity framework comes into force this Friday, April 3, expanding the number of critical sectors from seven to 18. Expert Nuno Pires highlights that the main challenge is a shortage of specialized human resources to meet the new legal obligations, particularly regarding risk analysis and incident management. The legislation also introduces direct liability for management boards, stricter incident reporting, and requirements for supply chain security, though many small and medium-sized enterprises remain outside the direct scope of the new rules.