Protect your business from phishing

Cyber Resilience

We're here to train your team and prevent cyberattacks.

Ransomware

Credential theft

Financial fraud

Installation of Trojans and backdoors

Theft of sensitive data

Realistic phishing simulations

Regular campaigns that mimic real attacks: emails and text, using templates in European Portuguese and custom domains.

Continuing education in cybersecurity

Interactive content: videos, quizzes, and case studies, tailored to each profile and also available on Microsoft Teams.

Easy reporting of suspicious emails

A button integrated into employees' email clients allows them to report suspicious messages with a single click, encouraging active participation in security.

Dashboards and human risk analysis

Ongoing assessment of risk levels by employee, department, or role, with clear metrics for audits and compliance.

Phishing is the main threat

One in four cyberattacks in Portugal in 2025 was a social engineering phishing attack.⁽¹⁾

Ransomware is on the rise and often starts with phishing

Portugal recorded 14 ransomware attacks in the first half of the year, an increase of 180% compared to the previous period, and a projected increase of 29.7% by 2025.⁽²⁾

The human factor is the primary cause of incidents

Between 60% and 74% of security breaches involve human error. 14% of infections begin with email phishing.⁽³⁾

The training works—the data proves it

Resilience programs reduce vulnerability to phishing by up to 86% in a year. 88% of organizations have increased participation.⁽⁴⁾

SMEs without in-house cybersecurity teams

The solution reduces human risk and facilitates compliance with NIS2 without the need for specialized resources.

Companies that rely heavily on corporate email

Sectors such as services, consulting, logistics, healthcare, and public administration are particularly targeted.

Organizations targeted by phishing or fraud

Cyber Resilience helps prevent recurring incidents and raises internal awareness.

Companies undergoing NIS2 certification or auditing

The service generates records, reports, and individual training certificates.

Phishing Campaigns

• Automatic or manual campaigns
• Templates in European Portuguese
• Editable fake login pages
• Phishing and smishing (text) simulation
• Custom domains
• Dashboards and performance metrics
• Risk analysis by user or team

Reporting

• Report button embedded in the email
• Automatic notification to security teams
• Immediate feedback to the employee
• Reduces response time to threats

eLearning

• Library with dynamic content (videos, quizzes, real-life case studies)
• Mandatory periodic training
• Distribution via the web or Microsoft Teams
• Complete reports and individual certificates

Proven reduction in human risk

The main cause of incidents.

Lower costs

Associated with fraud, service interruptions, or data loss.

Greater maturity and a culture of cybersecurity

Among employees.

Traceability and Evidence

In the context of audits and compliance with NIS2, DORA, GDPR, and ISO 27001.

Ongoing and up-to-date training

About new threats and social engineering techniques.

Faster

In detecting and responding to suspicious emails.

Building reputation and trust

Together with customers partners.

Increasing the organization's digital resilience

It helps reduce the likelihood and impact of security incidents.

Is this solution suitable for small and medium-sized businesses?

Yes. The solution is designed for businesses of all sizes, including SMEs that do not have in-house cybersecurity teams. MEO Empresas flexible plans and managed services to support the entire process.

Are phishing simulations customizable?

Yes. Campaigns can be customized by region, user group, type of attack, language, domain, and context. There are templates available in European Portuguese, and the team can configure scenarios tailored to your business.

Is the training mandatory?

It depends on the organization's internal policies. However, to comply with requirements such as NIS2, DORA, or ISO 27001, regular cybersecurity training is considered an essential practice and is often mandatory during audits.

Do I need to install any software?

The solution is cloud-based. The training is accessed via a web browser or Microsoft Teams. Only the Phish Report module may require a small add-in for customer .

Does NIS2 apply only to large companies?

No. It covers various entities in essential and critical sectors, regardless of size—including companies in the energy, transportation, healthcare, telecommunications, digital services, water, and food sectors, among others. Training is now a cross-cutting requirement.

Does cyber resilience affect productivity?

Yes—in a positive way. The training sessions are short, dynamic, and can be conducted at the most convenient time. Fewer incidents mean fewer work interruptions and greater operational continuity.

What is MEO Empresas Empresas' Cyber Resilience?

It is a managed cybersecurity training and awareness service that helps employees recognize and prevent social engineering attacks, such as phishing, smishing, and digital fraud. It includes realistic simulations, e-learning content, and tools for reporting suspicious emails.

Why does my company need cyber resilience?

Because most attacks start with human error—a single click, an incorrect share, or a compromised password. Cyber Resilience reduces the risk associated with human error, strengthens the internal security culture, and helps ensure compliance with standards such as NIS2, DORA, GDPR, and ISO 27001.

SMEs at risk of cyberattacks in Portugal

Micro-enterprises and SMEs are among the primary targets of cyberattacks. With fewer resources, they face a growing risk, which underscores the need to invest in cybersecurity.

AI-powered cyberattacks: the major threat to businesses

AI drives innovation, but it also enables faster and more sophisticated cyberattacks.

Cybersecurity today protects our daily lives

Digital security has become essential for protecting people—not just businesses and operations.

How can we help?

Social Engineering Attack

Any attempt to exploit human behavior to gain access to systems or sensitive information (phishing, smishing, vishing, impersonation, etc.).

Backdoor / Trojan

Malicious programs that install themselves discreetly, opening backdoors that allow attackers to access the system whenever they want.

Cybersecurity

A set of practices, processes, and technologies designed to protect systems, networks, and data from unauthorized access, attacks, or damage.

Safety Culture

A set of behaviors, habits, and practices that ensure all employees act safely when using technology and data.

Compliance

An organization’s ability to comply with legal, regulatory, or industry best practice standards—such as NIS2, GDPR, DORA, or ISO 27001.

Cyber Resilience (Cybersecurity Awareness)

Employees' ability to recognize, avoid, and report behaviors or situations that pose digital security risks.

Cyber Resilience

An organization’s ability to withstand, respond to, and recover quickly from cybersecurity incidents, minimizing operational, financial, and reputational impacts.

DORA

European regulation on digital operational resilience in the financial sector, including requirements for training, risk management, and incident response.

Cybersecurity E-learning

Online training with interactive content (videos, quizzes, real-life scenarios) designed to develop employees' digital security skills.

Social Engineering

Techniques used by attackers to manipulate people, leading them to disclose sensitive information or take actions that compromise the company’s security.

ISO 27001

An international standard for Information Security Management Systems, which includes requirements for training and ongoing professional development.

Malware

Malicious software designed to damage systems, steal information, or enable unauthorized control of devices.

MFA – Multi-Factor Authentication

A security mechanism that requires more than one form of identification (e.g., password + text code text app).

NIS2

A European directive that strengthens cybersecurity obligations for critical and important entities, including mandatory training requirements and measures to mitigate human-related risks.

Fraudulent Order

A request that appears legitimate (e.g., urgent transfer, IBAN change) but is actually made by an attacker impersonating an authority figure or colleague.

Weak Password

A password that is easy to guess or has been reused, which significantly increases the risk of unauthorized access.

Phish Report / Phish Reporter

A button or add-in integrated into the email that allows employees to report suspicious messages by sending them directly to security teams for review.

Phish Simulator

A solution tool that allows you to create and send realistic, customizable phishing simulations, complete with detailed metrics and reports.

Phishing

An attack involving the sending of messages (email, text, digital platforms) that impersonate legitimate entities, tricking users into clicking on malicious links or sharing sensitive data.

Ransomware

Malware that locks systems or encrypts files, demanding a ransom to restore access.

Report Suspicious Emails

An action in which an employee forwards or flags a potentially malicious message to the security team, speeding up analysis and mitigation.

Human Risk

The likelihood that an employee will perform an action that results in a security incident, such as opening a malicious attachment or sharing sensitive information.

Credential Theft

Fraudulently obtaining usernames, passwords, or tokens that allow unauthorized access to the organization’s systems.

Security Resilience Training

Ongoing training that combines instruction, educational content, and attack simulations to reduce human risk and reinforce a safety culture.

Managed Service

A model in which MEO Empresas the operational management of the solution, including campaigns, reports, configurations, and program development.

Phishing Simulation

Sending fake but controlled emails designed to train employees, assess behavior, and measure human risk.

Smishing

A type of phishing carried out via text, directing the user to fake websites or malicious actions.

SOC – Security Operations Center

A specialized team that monitors, detects, and responds to security incidents in real time.

Spoofing

Falsifying a sender's identity (email address, phone number, website) to deceive the user.

Vishing

A social engineering attack carried out via a phone call, in which the attacker impersonates a legitimate entity.

Vulnerability

A flaw or weakness in a system, process, or human behavior that can be exploited by attackers.

The products and services are aimed at the business market.

⁽¹⁾ Study by the insurance company Hiscox, “Hiscox Cyber Readiness Report 2025.” Data published in October 2025 on dinheirovivo.dn.pt.

⁽²⁾ 2025 Annual Internal Security Report (RASI). Data published in April 2026 by the Citizens for Cybersecurity Initiative.

⁽³⁾ Fortinet Training Institute’s Global Research Report “2025 Security Awareness and Training” from November 2025 and Markwide Research Report “Portugal Cybersecurity Market – Size, Share, Trends, Analysis & Forecast 2026–2035,” published in January 2026.

⁽⁴⁾ Usecure’s “The 2025 Security Awareness Training Benchmark Report” (2025 Edition) and SANS’s“SANS 2025 Security Awareness Report”.