RJCS · Articles 31 and 32
Cybersecurity Officer (RCS) and contact point
The Cybersecurity Officer (RCS) and the permanent contact point have related functions, but are not identical concepts. The organization shall define coordination, authority, availability and replacement.
For whom
When this article must enter into the plan.
Essential and important entities subject to the designation and communication provided for in Articles 31 and 32.
Brief tutorial
Four steps to start with method.
Adapt the depth, the responsible and the evidence to the concrete framework of the entity.
- 01
Set Template
Decide on internal or third party organization, safeguarding competences, authority, independence and continuity.
- 02
Formalise Cybersecurity Officer (RCS)
Document designation, functions, reporting, means, replacement and articulation with management.
- 03
Organize contact
Create monitored channels, scales, suplence, screening, scaling and availability tests.
- 04
Communicate and maintain
Make the required communications, preserve evidence and update changes within the applicable time limits.
Proof
Evidence to prepare.
- Act of appointment of the Cybersecurity Officer (RCS)
- Description of functions and reporting
- Accountct point procedure and scale
- Communication and testing receipts
Warning
Errors that weaken implementation.
- Confusing an email box with permanent availability
- Do not provide for replacement or leave
- Appoint without powers, means or access to management
Quick control
Initial checklist.
- Cybersecurity Officer (RCS) formalized
- Report defined
- Permanent channel monitored
- Supple tested
- Filed communication
Frequently Asked Questions
Two key answers.
The Cybersecurity Officer (RCS) and the contact point must be the same person?
The articles deal with different functions. The concrete model must comply with legal requirements and ensure effective coordination and availability.
Can a supplier participate in the model?
There may be support from third parties, but responsibilities, powers, continuity and communication must be clearly defined.
Primary source
Decree-Law No. 125/2025 of 4 December
Information tutorial. Always confirm the official text, the applicable regulations and the specific framework of the organization.