Law and standards

NIS2

What is NIS2?

NIS2 is EU Directive 2022/2555 on network and information security. It obliges companies in certain sectors to run risk management, to report security incidents and it places responsibility explicitly on management.

It applies to essential and important entities in the sectors the directive lists, depending on the size and activity of the company. Transposition into Austrian law and its current status are published by the responsible authority at nis.gv.at. Check the status there before you build decisions on it.

Companies outside the scope still feel the directive. Clients who are in scope pass their security requirements down the supply chain, often as questionnaires or requests for evidence about IT security.

NIS2 and compliance Gap analysis against NIS2

Related terms

DORA DORA is Regulation (EU) 2022/2554 on digital operational resilience for the financial sector. It has applied since 17 January 202… ISO/IEC 27001 ISO/IEC 27001 is the international standard for an information security management system. It describes how an organisation recor… Gap analysis A gap analysis compares the current state of IT security against a defined target state and records every gap between the two. Th… Data breach notification duty The data breach notification duty requires a personal data breach to be reported to the supervisory authority within 72 hours of …

All terms in the knowledge base

Note: This entry reflects the state of knowledge to the best of our understanding and serves as general orientation. It is not legal advice. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu.

From the term to practice

Where does your business actually stand?

The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT. The first call takes 20 minutes and carries no charge.

Book a first call