The portuguese government entities such as ANACOM and CMVM should enforce certains type of security architectures for all those companies in risk of paying penalties.