NISG in force
The Austrian Network and Information System Security Act is in force. Minimum cybersecurity measures have been binding since that day.
Home · Services on demand · NIS2 guidance
NIS2 guidance
We support you with the NIS2 requirements: assessment of where you stand, documentation and an action plan in line with the state of the art. You know where you stand and what needs to be done. We prepare you, but we do not issue an official certificate, the legal responsibility stays with you. If you need a formal audit or certification, we refer you to an accredited body.
One law, many open questions.
NIS2 has been talked about for months, yet what it means for your own business often remains unclear. And even companies that are not covered themselves often feel the requirements through customers in the supply chain. At the same time the deadlines are running, and what is required is not just measures but documentation you can present at any time.
Three deadlines you should know
Registration requirement
Affected companies must register with the responsible authority within three months of its entry into force. Suppliers are usually not covered themselves, but often receive the requirements through contracts with their customers.
Self-declaration
After registration comes a structured self-declaration on the state of your risk management measures. From then on, documentation, measures and reporting channels must be verifiable at any time. Breaches can lead to high fines.
First the question everyone asks: does this even affect me?
Does your business fall under NIS2?
The initial consultation is free of charge. We assess whether the obligation applies to you and what to tackle first.