IT and cybersecurity for public administration
Citizen services kept available, data protected and technical support with contracted service levels.
In local authorities and public entities, citizen services depend on available systems and well-protected data, often with small IT teams. Overwan manages infrastructure, strengthens security with SOC/NOC and Zero Trust, maintains tested backups and recovery plans, and complements the internal team with 24x7x365 support.
Who we serve
- City and parish councils
- Municipal services and municipal companies
- Public institutes and bodies
- Intermunicipal communities and municipal associations
- State business sector
IT challenges in the sector
Citizen services
Service desks, online platforms and internal systems must be available during business hours and, in many cases, beyond them.
Small IT teams
Many entities have few technicians for many systems and locations. External support covers peaks, extended hours and specialised skills.
Ransomware
Public entities have been targeted by attacks impacting the services they provide. Protected backups and tested recovery plans reduce downtime.
Dispersed buildings and services
Municipal buildings, schools, libraries and sports facilities need secure connections and centralised management.
Cybersecurity obligations
The Legal Cybersecurity Regime introduces risk management measures, incident notification requirements and accountability for governing bodies.
Public procurement
The acquisition of services follows public procurement procedures, with specifications, service levels and deadlines that must be met and demonstrated.
How we help
- 24x7x365 Technical Support: Assistance, monthly/quarterly contracts and hour packages. Auditable metrics and our own tooling.
- Infrastructure Management: We operate servers, networks, virtualization, backup and disaster recovery with modern automation and observability.
- Backup & Disaster Recovery: 3-2-1 strategies with Veeam, Nakivo and cloud replication. Periodic, audited recovery tests.
- IT Outsourcing: We run your IT Department's functions in outsourcing — full or partial replacement.
- SOC/NOC as a Service: 24/7/365 operations with managed SIEM, SOAR, and EDR/XDR. Integrated NOC and SOC, documented runbooks, and single SLA.
- Zero Trust / ZTNA: Identity and context-based access, micro-segmentation, and replacement of legacy VPN. Continuous endpoint posture and full auditing.
- Network Security & Zero Trust: NGFW, NAC, Zero Trust segmentation, IDS/IPS and content filtering. Physical access control with card and biometrics, CCTV and fire detection.
- SD-WAN & LAN Networks: Design and operation of SD-WAN, LAN, and campus networks. Automation, IP/DNS/DHCP management, and teams certified by major manufacturers.
- Sovereign Cloud: European sovereign cloud: data in the EU, operated by European entities, BYOK/HYOK, and immune to the Cloud Act. NIS2, GDPR, and DORA compliant.
- DRaaS: Managed Disaster Recovery with continuous replication, RTO < 15 min and RPO < 60 s. Quarterly tests and NIS2 / DORA compliance.
Regulation & compliance
Legal Cybersecurity Regime (NIS2)
Decree-Law No. 125/2025, which transposes the NIS2 Directive, covers public administration entities, with cybersecurity risk management measures and incident notification obligations. Each entity's classification should be assessed according to its nature and activity.
GDPR
Public entities process large volumes of citizens' personal data, must apply technical and organisational measures appropriate to the risk, and are required to appoint a data protection officer.
Public Contracts Code
The procurement of IT services follows the Public Contracts Code, which sets out acquisition procedures and contract execution rules.
Why Overwan
- Since 2011: Managing IT for companies in Portugal for over a decade.
- 24x7x365 support: Nights, weekends and holidays, with continuous monitoring.
- Certifications: Certified team and processes.
- Technology partners: Partnerships with leading IT vendors.
Frequently asked questions
Can you be hired through a public procurement procedure?
Yes. We participate in public procurement procedures and respond to tender specifications with the required service levels and documentation.
Do you complement the entity's IT team?
Yes. We can take on specific areas, such as monitoring, backups, or after-hours support, working alongside the internal team and their procedures.
Do you help with the Legal Framework for Cybersecurity?
We help with the technical side: inventory, risk analysis, monitoring, incident management and backups. Legal assessment and management decisions remain the responsibility of the entity.
Where is the data hosted?
It depends on the solution. When required, we propose hosting in the European Union, including sovereign cloud options, and we document the location of the data and backups.