NIS2 consulting · Austria

NIS2. Understand your requirements.
Plan your next steps.

Directly in scope or facing requests from a customer? We assess your IT and organisation and deliver a clear action plan for regulatory duties and customer requirements.

Request a consultation Explore your options

Directly with Samuel Ziegler · German & English

Unsure whether you are in scope?

Your starting point

The right support for your responsibilities.

Start with the option that fits your situation. If both apply, we assess the requirements together.

Entities directly in scope

NIS2 gap analysis

Understand where your organisation stands and which measures need attention first.

  • Clarify your scopeReview your sector, company size and relevant exceptions.
  • Assess the gapsReview IT and organisational measures against section 32 NISG 2026.
  • Prioritise implementationDocumented findings and an action plan for management and IT.

Your outcome: a documented view of the gaps and a clear sequence of next steps.

Discuss a gap analysis

Suppliers & service providers

Supplier security assessment

Your customer has sent a security questionnaire or requested evidence of your security measures.

  • Understand the customer’s requestReview the questionnaire and the evidence your customer expects.
  • Review your existing measuresAssess access, updates, backups, incident procedures and organisation.
  • Prepare supporting evidenceDocumented findings to share with your customer, with gaps clearly identified.

Your outcome: a sound basis for your answers and the conversation with your customer.

Discuss customer requirements

We agree the scope and fee before you commission the work. We can directly implement the agreed measures when needed.

Working together

From the first conversation to an action plan.

  1. 01

    Discuss your situation

    In a first call we discuss your role, requirements and deadlines. A brief description is enough to get started.

  2. 02

    Assess what matters

    Once commissioned, we assess the agreed areas through discussions, documentation and technical evidence.

  3. 03

    Agree the next steps

    You receive the findings and prioritised actions. We explain the results and can support implementation.

Dipl.-Ing. Samuel Ziegler, BSc

Your contact

Dipl.-Ing. Samuel Ziegler, BSc

Founder and owner

I work with you from the initial consultation through assessment and implementation. You receive a clear explanation of the findings and practical, prioritised next steps.

Request an initial consultation LinkedIn

Project references

Selected projects and references

An overview of delivered projects across industries, from continuous monitoring to incident response.

  • Monitoring and SIEM
  • Incident response
  • Industry, public sector and more
See references →

Initial guidance

Is your company in scope?

Four questions give you an initial indication. An individual assessment also considers your specific activities, ownership structure and exceptions.

NISG 2026: important dates

1 October 2026NISG 2026 enters into force

31 December 2026Registration for entities in scope at commencement

No email required. Your answers stay in your browser.

Already received a customer request? View the supplier assessment

Which sector do you operate in?

Do you provide any of these services?

Do you provide any of these services?

DNS services, TLD registries, trust services, public communications networks or services, domain name registration.

Which company size applies?

Which company size applies?

Staff measured in annual work units. Partner and linked enterprises may affect the calculation (section 25).

Do you supply companies in scope of NIS2?

Do you supply companies in scope of NIS2?

Indicative guidance, not legal advice. The specific entity type, jurisdiction and any special provisions determine coverage. Based on: NISG 2026.

Common questions

What to know before you start.

Download the NIS2 briefing (German PDF)
Are suppliers automatically directly in scope?

A supplier relationship alone does not bring a company directly into scope. Customers may pass on security requirements through contracts. Your company may also be in scope in its own right, for example as an IT service provider. Both roles can apply at the same time.

Will we receive NIS2 certification?

The NISG 2026 does not provide for general NIS2 certification. You receive documented findings and an action plan. These support implementation and evidence gathering; they do not replace legal review or assessment by the authority.

Do you complete the customer questionnaire for us?

We assess the relevant measures and document what is supported by evidence and where gaps remain. This gives you a factual basis for your answers. You remain responsible for the information submitted to your customer.

How much does an assessment cost and how long does it take?

This depends on the scope, your IT environment and the available documentation. We discuss your needs in the initial consultation and provide a proposal with scope, fee and schedule before you commission the work.

Can you help with implementation?

Yes. We implement monitoring, logging, server hardening, network segmentation and backups. We agree the scope based on the findings. Explore IT solutions.

Legal sources & guidance: NISG 2026 (RIS)WKO / NIS authority: FAQ (German)WKO scoping guide (German)

Your next step

Let’s clarify what you need.

NIS2 duties, a customer questionnaire or an open question about scope: tell us about your situation. We’ll discuss the right starting point.

Request a consultationoffice [at] vetosec [dot] at

German & English · Clear next steps

VETOSEC_

office [at] vetosec [dot] at · vetosec.at/contact/

Online-Version: https://vetosec.at/en/compliance/nis2/ · Stand: 19.10.2026

Contact

Free first call

Briefly describe your situation. We help you assess it and plan the next step. Reply within 24 hours on working days.

Dipl.-Ing. Samuel Ziegler, BScFounder

office [at] vetosec [dot] at