As of April 3, 2026, a cyberattack on a Portuguese company is no longer just an IT problem. It has also become a board of directors issue, with potential personal consequences for each of its members. Decree-Law no. 125/2025, which transposes the NIS 2 Directive, completely redesigns...