{"id":8171,"date":"2026-10-18T11:57:48","date_gmt":"2026-10-18T09:57:48","guid":{"rendered":"https:\/\/eu.it-cyberwall.com\/guides\/auditoria-varrimento-de-vulnerabilidades-ou-teste-de-intrusao-o-que-encomendar\/"},"modified":"2026-10-18T20:38:30","modified_gmt":"2026-10-18T18:38:30","slug":"audit-scan-test-intrusion","status":"publish","type":"page","link":"https:\/\/eu.it-cyberwall.com\/pt-pt\/guides\/audit-scan-test-intrusion\/","title":{"rendered":"Auditoria, varrimento de vulnerabilidades ou teste de intrus\u00e3o: o que encomendar"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"8171\" class=\"elementor elementor-8171 elementor-6680\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d6b23bd elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d6b23bd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4847607\" data-id=\"4847607\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2517b80 elementor-widget elementor-widget-html\" data-id=\"2517b80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>.itcw-g{max-width:900px;margin:0 auto;font-size:17px;line-height:1.65;color:#2b2f3a}.itcw-g h2{margin-top:10px}.itcw-g .tw{overflow-x:auto;margin:18px 0}.itcw-g table{width:100%;border-collapse:collapse;font-size:15px;min-width:640px}.itcw-g th,.itcw-g td{border:1px solid #e3e6ee;padding:10px 12px;vertical-align:top;text-align:left}.itcw-g thead th{background:#0E0129;color:#fff}.itcw-g tbody th{background:#F6F7FA;font-weight:600}.itcw-g .box{background:#F6F7FA;border-left:4px solid #DE3241;padding:16px 20px;border-radius:6px;margin:18px 0}.itcw-g .box.ok{border-left-color:#2C9703}.itcw-g sup a{text-decoration:none;font-weight:600}.itcw-g ol.src li{margin-bottom:8px;font-size:15px;word-break:break-word}.itcw-g .note{font-size:14px;color:#6b7080}.itcw-g .toc a{display:inline-block;margin:4px 10px 4px 0}<\/style>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-090f00e elementor-widget elementor-widget-heading\" data-id=\"090f00e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h6 class=\"elementor-heading-title elementor-size-default\">Guia<\/h6>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a49fd4e elementor-widget elementor-widget-heading\" data-id=\"a49fd4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Auditoria, varrimento de vulnerabilidades ou teste de intrus\u00e3o: o que encomendar<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3fe4617 elementor-widget elementor-widget-text-editor\" data-id=\"3fe4617\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p style=\"text-align:center\">Um varrimento automatizado lista falhas prov\u00e1veis, uma auditoria classifica-as e diz o que corrigir, um teste de intrus\u00e3o prova o que um atacante poderia fazer com elas. Eis as defini\u00e7\u00f5es da ANSSI, o que um relat\u00f3rio deve conter e o que o RGPD e a ISO 27001 imp\u00f5em realmente.<\/p><p class=\"note\" style=\"text-align:center\">Atualizado a 18 de outubro de 2026 \u00b7 Os n\u00fameros t\u00eam as fontes indicadas no fundo da p\u00e1gina; as aprecia\u00e7\u00f5es s\u00e3o da IT CyberWall.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7a65bc8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7a65bc8\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-53b09af\" data-id=\"53b09af\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8802df8 elementor-widget elementor-widget-text-editor\" data-id=\"8802df8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><div class=\"box toc\"><strong>Neste guia:<\/strong><br \/><a href=\"#trois\">Tr\u00eas servi\u00e7os que se confundem<\/a> \u00b7 <a href=\"#types\">Os cinco tipos de auditoria segundo a ANSSI<\/a> \u00b7 <a href=\"#rapport\">O que o relat\u00f3rio deve conter<\/a> \u00b7 <a href=\"#loi\">O que a lei imp\u00f5e e o que n\u00e3o imp\u00f5e<\/a> \u00b7 <a href=\"#autorisation\">Sempre uma autoriza\u00e7\u00e3o por escrito<\/a> \u00b7 <a href=\"#commander\">O que encomendar?<\/a> \u00b7 <a href=\"#sources\">Fontes<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d86f394 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d86f394\" data-element_type=\"section\" data-e-type=\"section\" id=\"trois\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a2d3929\" data-id=\"a2d3929\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6382abe elementor-widget elementor-widget-heading\" data-id=\"6382abe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Tr\u00eas servi\u00e7os que se confundem<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a7115da elementor-widget elementor-widget-text-editor\" data-id=\"a7115da\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><table><thead><tr><th>Servi\u00e7o<\/th><th>O que faz<\/th><th>O que recebe<\/th><\/tr><\/thead><tbody><tr><td><strong>Varrimento de vulnerabilidades<\/strong><\/td><td>Uma ferramenta interroga automaticamente as suas m\u00e1quinas e compara o que v\u00ea com uma base de falhas conhecidas.<\/td><td>Uma lista de falhas prov\u00e1veis, muitas vezes longa, a triar.<\/td><\/tr><tr><td><strong>Auditoria de seguran\u00e7a<\/strong><\/td><td>Auditores examinam a sua arquitetura, as suas configura\u00e7\u00f5es, o seu c\u00f3digo ou a sua organiza\u00e7\u00e3o.<\/td><td>Um relat\u00f3rio que classifica as falhas e diz o que corrigir primeiro.<\/td><\/tr><tr><td><strong>Teste de intrus\u00e3o<\/strong><\/td><td>Auditores p\u00f5em-se na pele de um atacante e verificam se uma falha \u00e9 realmente explor\u00e1vel e com que impacto<sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/td><td>A prova do que um atacante poderia fazer, passo a passo.<\/td><\/tr><\/tbody><\/table><div class=\"box\">Para a ANSSI, \u00aba pesquisa inteiramente automatizada de vulnerabilidades n\u00e3o representa uma atividade de auditoria\u00bb<sup><a href=\"#source-1\">[1]<\/a><\/sup>. Um varrimento \u00e9 \u00fatil, mas n\u00e3o \u00e9 uma auditoria.<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-592bdc5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"592bdc5\" data-element_type=\"section\" data-e-type=\"section\" id=\"types\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2442f4e\" data-id=\"2442f4e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a3ea377 elementor-widget elementor-widget-heading\" data-id=\"a3ea377\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Os cinco tipos de auditoria segundo a ANSSI<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61941eb elementor-widget elementor-widget-text-editor\" data-id=\"61941eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>O referencial dos prestadores de auditoria qualificados (PASSI) distingue cinco atividades<sup><a href=\"#source-1\">[1]<\/a><\/sup>:<\/p><ol><li><strong>Auditoria de arquitetura<\/strong>: a escolha e o posicionamento dos equipamentos, as liga\u00e7\u00f5es \u00e0 internet e a redes de terceiros.<\/li><li><strong>Auditoria de configura\u00e7\u00e3o<\/strong>: as defini\u00e7\u00f5es dos equipamentos de rede, dos sistemas, das aplica\u00e7\u00f5es e dos produtos de seguran\u00e7a.<\/li><li><strong>Auditoria de c\u00f3digo-fonte<\/strong>: as falhas no c\u00f3digo de uma aplica\u00e7\u00e3o.<\/li><li><strong>Teste de intrus\u00e3o<\/strong>: a explora\u00e7\u00e3o das falhas em condi\u00e7\u00f5es reais de ataque.<\/li><li><strong>Auditoria organizacional e f\u00edsica<\/strong>: a governa\u00e7\u00e3o, os procedimentos, a seguran\u00e7a das instala\u00e7\u00f5es.<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8776107 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8776107\" data-element_type=\"section\" data-e-type=\"section\" id=\"rapport\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1532094\" data-id=\"1532094\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-dc3979b elementor-widget elementor-widget-heading\" data-id=\"dc3979b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">O que o relat\u00f3rio deve conter<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e5cb20f elementor-widget elementor-widget-text-editor\" data-id=\"e5cb20f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>O referencial PASSI fixa o conte\u00fado de um relat\u00f3rio de auditoria<sup><a href=\"#source-1\">[1]<\/a><\/sup>. \u00c9 uma boa grelha para avaliar qualquer relat\u00f3rio:<\/p><ul><li>uma <strong>s\u00edntese compreens\u00edvel por n\u00e3o especialistas<\/strong>: contexto, \u00e2mbito, falhas cr\u00edticas e aprecia\u00e7\u00e3o do n\u00edvel de seguran\u00e7a;<\/li><li>uma <strong>tabela das vulnerabilidades<\/strong> classificadas segundo o seu impacto e a sua facilidade de explora\u00e7\u00e3o;<\/li><li><strong>recomenda\u00e7\u00f5es<\/strong> ligadas a cada falha, classificadas por criticidade e por custo;<\/li><li>para um teste de intrus\u00e3o, o <strong>desenrolar do teste<\/strong> e o m\u00e9todo utilizado;<\/li><li>os <strong>limites<\/strong>: o que n\u00e3o p\u00f4de ser coberto e as fases realizadas por ferramentas autom\u00e1ticas.<\/li><\/ul><p>Um relat\u00f3rio que n\u00e3o passa de uma sa\u00edda de ferramenta, sem s\u00edntese nem prioridades, n\u00e3o o ajudar\u00e1 a decidir.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1a50f37 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1a50f37\" data-element_type=\"section\" data-e-type=\"section\" id=\"loi\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9f4c41b\" data-id=\"9f4c41b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-016da0c elementor-widget elementor-widget-heading\" data-id=\"016da0c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">O que a lei imp\u00f5e e o que n\u00e3o imp\u00f5e<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f19049 elementor-widget elementor-widget-text-editor\" data-id=\"0f19049\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><ul><li><strong>O RGPD<\/strong> exige, para os tratamentos de dados pessoais, \u00abum processo para testar, apreciar e avaliar regularmente a efic\u00e1cia das medidas\u00bb de seguran\u00e7a (artigo 32.\u00ba), com um n\u00edvel adequado ao risco<sup><a href=\"#source-2\">[2]<\/a><\/sup>. N\u00e3o imp\u00f5e expressamente uma auditoria nem um teste de intrus\u00e3o: cabe-lhe a si escolher um procedimento proporcionado.<\/li><li><strong>A norma ISO\/IEC 27001<\/strong> \u00e9 uma norma volunt\u00e1ria: \u00e9 a pr\u00f3pria empresa que decide certificar-se<sup><a href=\"#source-3\">[3]<\/a><\/sup>. N\u00e3o \u00e9 uma obriga\u00e7\u00e3o legal, mesmo que um cliente a possa exigir por contrato.<\/li><li><strong>Uma qualifica\u00e7\u00e3o PASSI<\/strong> s\u00f3 \u00e9 obrigat\u00f3ria quando um texto ou um contrato a exige. Pode ser verificada no site da ANSSI.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-30e6bac elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"30e6bac\" data-element_type=\"section\" data-e-type=\"section\" id=\"autorisation\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-20d378b\" data-id=\"20d378b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-90d5350 elementor-widget elementor-widget-heading\" data-id=\"90d5350\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Sempre uma autoriza\u00e7\u00e3o por escrito<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f1d8264 elementor-widget elementor-widget-text-editor\" data-id=\"f1d8264\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>Um teste de intrus\u00e3o consiste em atacar sistemas: s\u00f3 se faz com o acordo por escrito do seu propriet\u00e1rio. O referencial PASSI prev\u00ea uma conven\u00e7\u00e3o assinada antes da auditoria e, para um teste de intrus\u00e3o, uma ficha de autoriza\u00e7\u00e3o assinada pelo mandante, pelo auditado e pelos terceiros envolvidos (o seu fornecedor de alojamento, por exemplo), que lista os alvos, as datas e as horas<sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-02a7bbc elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"02a7bbc\" data-element_type=\"section\" data-e-type=\"section\" id=\"commander\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6669e3a\" data-id=\"6669e3a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-bdfc223 elementor-widget elementor-widget-heading\" data-id=\"bdfc223\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">O que encomendar?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a2402c3 elementor-widget elementor-widget-text-editor\" data-id=\"a2402c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><table><thead><tr><th>A sua situa\u00e7\u00e3o<\/th><th>O que \u00e9 adequado<\/th><\/tr><\/thead><tbody><tr><td>N\u00e3o sabe em que ponto est\u00e1<\/td><td>Uma auditoria de arquitetura e de configura\u00e7\u00e3o, com uma s\u00edntese para a dire\u00e7\u00e3o.<\/td><\/tr><tr><td>Quer acompanhar a evolu\u00e7\u00e3o ao longo do tempo<\/td><td>Um varrimento regular, como complemento de uma auditoria, nunca em sua substitui\u00e7\u00e3o.<\/td><\/tr><tr><td>Um site ou uma aplica\u00e7\u00e3o expostos na internet<\/td><td>Um teste de intrus\u00e3o nesse \u00e2mbito.<\/td><\/tr><tr><td>Um cliente ou um concurso exige uma prova<\/td><td>Leia a exig\u00eancia: qualifica\u00e7\u00e3o PASSI, certifica\u00e7\u00e3o ISO 27001 ou simples relat\u00f3rio de auditoria n\u00e3o s\u00e3o a mesma coisa.<\/td><\/tr><\/tbody><\/table><p>As nossas auditorias est\u00e3o descritas na p\u00e1gina <a href=\"https:\/\/eu.it-cyberwall.com\/pt-pt\/audit-de-securite\/\">Auditoria de seguran\u00e7a<\/a>.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7254e9e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7254e9e\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b69b529\" data-id=\"b69b529\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-30dee9b elementor-widget elementor-widget-heading\" data-id=\"30dee9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">N\u00e3o sabe o que encomendar?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d6dd8e4 elementor-widget elementor-widget-text-editor\" data-id=\"d6dd8e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Descreva o seu contexto e o que lhe pedem: dizemos-lhe que tipo de auditoria \u00e9 adequado.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e001a47 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"e001a47\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md\" href=\"https:\/\/eu.it-cyberwall.com\/pt-pt\/contact\/?mf-besoin=audit#formulaire\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-arrow-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M190.5 66.9l22.2-22.2c9.4-9.4 24.6-9.4 33.9 0L441 239c9.4 9.4 9.4 24.6 0 33.9L246.6 467.3c-9.4 9.4-24.6 9.4-33.9 0l-22.2-22.2c-9.5-9.5-9.3-25 .4-34.3L311.4 296H24c-13.3 0-24-10.7-24-24v-32c0-13.3 10.7-24 24-24h287.4L190.9 101.2c-9.8-9.3-10-24.8-.4-34.3z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Descrever a minha necessidade<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7f142f1 elementor-widget elementor-widget-text-editor\" data-id=\"7f142f1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><a href=\"https:\/\/eu.it-cyberwall.com\/pt-pt\/guides\/\">\u2190 Todos os nossos guias<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2fcb194 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2fcb194\" data-element_type=\"section\" data-e-type=\"section\" id=\"sources\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-90414eb\" data-id=\"90414eb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1f422c7 elementor-widget elementor-widget-heading\" data-id=\"1f422c7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Fontes<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ec2591 elementor-widget elementor-widget-text-editor\" data-id=\"4ec2591\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p class=\"note\">Fontes consultadas a 18 de outubro de 2026. Os pre\u00e7os dos fornecedores s\u00e3o indicados sem IVA, na moeda e na regi\u00e3o da tabela publicada, e podem mudar: confirme sempre a p\u00e1gina oficial antes de decidir.<\/p><ol class=\"src\"><li id=\"source-1\">ANSSI \u2013 Prestataires d\u2019audit de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information (PASSI), r\u00e9f\u00e9rentiel d\u2019exigences v2.1-a (1 de setembro de 2023) \u2014 <a href=\"https:\/\/cyber.gouv.fr\/sites\/default\/files\/document\/R%C3%A9f%C3%A9rentiel%20PASSI%20%E2%80%93%20version%202.1-a%20%E2%80%93%20sans%20marque%20de%20r%C3%A9vision.pdf\" target=\"_blank\" rel=\"noopener\">cyber.gouv.fr\/sites\/default\/files\/document\/R%C3%A9f%C3%A9rentiel%20PASSI%20%E2%80%93%20version%202.1-a%20%E2%80%93%20sans%20marque%20de%20r%C3%A9vision.pdf<\/a><\/li><li id=\"source-2\">CNIL \u2013 R\u00e8glement europ\u00e9en sur la protection des donn\u00e9es, chapitre 4 (artigo 32.\u00ba) \u2014 <a href=\"https:\/\/www.cnil.fr\/fr\/reglement-europeen-protection-donnees\/chapitre4\" target=\"_blank\" rel=\"noopener\">www.cnil.fr\/fr\/reglement-europeen-protection-donnees\/chapitre4<\/a><\/li><li id=\"source-3\">ISO \u2013 ISO\/IEC 27001, Information security management systems \u2014 <a href=\"https:\/\/www.iso.org\/isoiec-27001-information-security.html\" target=\"_blank\" rel=\"noopener\">www.iso.org\/isoiec-27001-information-security.html<\/a><\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":8066,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"Scan, auditoria ou pentest: o que encomendar | IT CyberWall","_seopress_titles_desc":"An\u00e1lise de vulnerabilidades, auditoria ou teste de intrus\u00e3o para empresas na Europa: defini\u00e7\u00f5es da ANSSI, relat\u00f3rio e o que exigem o RGPD e a ISO 27001.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"teste de intrus\u00e3o pme europa,auditoria de seguran\u00e7a inform\u00e1tica,an\u00e1lise de vulnerabilidades b\u00e9lgica,pentest empresa","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-8171","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/pages\/8171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/comments?post=8171"}],"version-history":[{"count":1,"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/pages\/8171\/revisions"}],"predecessor-version":[{"id":8172,"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/pages\/8171\/revisions\/8172"}],"up":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/pages\/8066"}],"wp:attachment":[{"href":"https:\/\/eu.it-cyberwall.com\/pt-pt\/wp-json\/wp\/v2\/media?parent=8171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}