NIS2 in Austria: Reporting obligation from October and Federal Office for Cybersecurity

TVS News AI, editorially supervised, presents NIS2 in Austria: Reporting obligation from October and Federal Office for Cybersecurity.

Cyberattacks on government and businesses are on the rise – now Austria is tightening the reins. The neighboring country is transposing the EU NIS2 directive into national law and introducing new registration requirements for companies and authorities. In addition, a Federal Office for Cybersecurity is being established.

What the reform means in concrete terms and why you should keep an eye on it even if your company is (not yet) based in Austria – we'll look at that here.

What does the NIS2 implementation in Austria bring?

The NIS2 directive brings registration requirements for companies and authorities in Austria. Organizations must register – and from October 1, a reporting obligation for IT incidents also kicks in. As for the exact deadlines and obligations, questions remain unanswered for now.

Federal Office for Cybersecurity: A new authority is emerging

Parallel to the NIS2 implementation, Austria's cyber landscape is growing: a new Federal Office for Cybersecurity is being established. This gives the neighboring country a central point of contact for cyber issues – in addition to existing structures.

Conclusion: Obligations and structures in transition

Austria is consolidating its cyber defense: The NIS2 directive brings registration requirements and a reporting obligation for IT incidents, and the new federal office supplements the supervisory structures. For companies and authorities, this means: more obligations, but also clearer points of contact. What the implementation will look like in detail will become clear in the coming weeks.