Warning The vulnerabilities PHP2Shell and HTTP2Shell are being heavily exploited right now. Many websites and servers are affected. Please check here first whether you are affected. Am I affected?

NIS2 reporting duty Where and when do I report a NIS2 incident in Austria?

Essential and important entities report a significant cybersecurity incident under section 34 NISG 2026 in three steps: early warning within 24 hours, incident report within 72 hours, final report no later than one month after that. Reports go to the competent CSIRT through the reporting platform in the Austrian business service portal (USP).

The NISG 2026 has applied since 1 October 2026 and transposes the NIS2 directive in Austria. The duty only applies to entities within its scope, which depends on sector and size.

See NIS2 and the scoping checkIT emergency help

Where does your company stand? The IT security check shows it in two weeks.

See the check, from €1,299
All terms in the knowledge base
VETOSEC_

office [at] vetosec [dot] at · vetosec.at/contact/

Online-Version: https://vetosec.at/en/it-security/nis2-meldepflicht/ · Stand: 31.10.2026

Contact

Free first call

Briefly describe your situation. We help you assess it and plan the next step. Reply within 24 hours on working days.

Dipl.-Ing. Samuel Ziegler, BScFounder

office [at] vetosec [dot] at