Awareness, Training and Best Practices

Provide role-specific training and general awareness sessions.  

 Topics should include: 

 

 Data protection law and privacy (Law No 058/2021). 

 Secure development lifecycle and secure configuration. 

 Phishing awareness and safe handling of sensitive data. 

 Incident reporting procedures and personal responsibilities.