Verifying the Situation of Cybersecurity in Portugal`s Municipalities

This study presents the results of the application of a survey designed to verify if cybersecurity requirements are being applied in municipal administrations. To check how these information security measures are implemented, we developed a questionnaire containing the leading cyber security checkpoints related to local IT administration. These checkpoints were elaborated based on recommendations from institutions specialized in cybersecurity, scientific literature, and current legislation. The conformity or not of the questions formulated in this survey aims to provide a panorama of the current situation about information security. Furthermore, the analysis of the survey answers by the Municipality made it possible to reveal the stage they are at concerning the practices desired to implement secure and effective cybersecurity in the operation of their information systems. Therefore, we can prepare specific reports based on the Municipality’ answers. Thus, the results indicated which cybersecurity gaps need to resolve, practices without compliance with the legislation in force, and how the Municipality can mitigate the security risks involved.