{"id":24526,"date":"2026-04-08T10:32:17","date_gmt":"2026-04-08T08:32:17","guid":{"rendered":"https:\/\/www.haslinger-nagele.com\/nisg-2026-es-wird-ernst\/"},"modified":"2026-05-06T10:21:16","modified_gmt":"2026-05-06T08:21:16","slug":"nisg-2026-es-wird-ernst","status":"publish","type":"post","link":"https:\/\/www.haslinger-nagele.com\/en\/nisg-2026-es-wird-ernst\/","title":{"rendered":"NISG 2026 \u2013 it\u2019s getting serious"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Cybersecurity is being placed on a new foundation with the Network and Information Systems Security Act 2026 (NISG 2026). Starting <strong>October 1st, 2026<\/strong>, new <strong>obligations <\/strong>will apply to a wide range of companies operating in sectors relevant to society. The <strong>responsibility<\/strong> for complying with these obligations clearly lies with <strong>corporate management<\/strong>. A particularly critical point: The NISG 2026 also takes effect throughout the <strong>supply chain<\/strong>. Even companies that are not directly covered may be indirectly subject to these obligations through the supply chain. This is the case, for example, when major contractual partners demand corresponding proof of cybersecurity measures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our Applicability Check offers a quick, free, and straightforward initial assessment of whether the new law applies to your company. Please note: The applicability check is currently available in German only.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link has-white-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/nis2-haslinger-nagele.at\/\" style=\"background-color:#002855\" target=\"_blank\" rel=\"noreferrer noopener\">Check applicability now<\/a><\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>A range of new obligations<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Companies that fall within the scope of NISG 2026 must, in particular:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Register with the competent authority<\/li>\n\n\n\n<li>Implement appropriate and proportionate risk management measures<\/li>\n\n\n\n<li>Report significant security incidents without delay<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Risk management measures include, among others:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Concepts regarding risk analysis and information system security<\/li>\n\n\n\n<li>Access control and authentication concepts<\/li>\n\n\n\n<li>Functioning backup, emergency, and recovery processes<\/li>\n\n\n\n<li>Training<\/li>\n\n\n\n<li>Supply chain security<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Why companies should act now<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There is little time left until the NISG 2026 takes effect, and some of the required measures need sufficient lead time. Companies should therefore <strong>not wait<\/strong> until the cybersecurity authority comes knocking. Those who hesitate too long risk severe penalties. The law provides for high administrative fines, which can quickly make any failures costly.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What steps to take<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Even before specific measures are planned, processes defined, or responsibilities assigned, one key question should be clarified: <strong>Does my company fall under the NISG 2026 at all?<\/strong><\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link has-white-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/nis2-haslinger-nagele.at\/\" style=\"background-color:#002855\" target=\"_blank\" rel=\"noreferrer noopener\">Check applicability now<\/a><\/div>\n<\/div>\n\n\n\t\t\t\t\t\t\t\t\t<div class=\"panel-default contactbox\" id=\"ansprechperson\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"panel-body\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"row\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-lg-6\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"intro\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      <h2>We are happy to support you in assessing this!<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t    \t\t\t\t\t\t\t\t\t\t\t\t      <p>In practice, however, the assessment is not always straightforward. In particular, when attributing key figures of affiliated companies, there may be room for interpretation. In such cases, it is advisable to seek expert advice early on. <\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t    \t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-lg-6\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t  \t\t\t\t\t\t\t\t\t\t\t\t\t\t  <a href=\"https:\/\/www.haslinger-nagele.com\/en\/team\/klara-fuchs\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t    <img decoding=\"async\" src=\"https:\/\/www.haslinger-nagele.com\/wp-content\/uploads\/2026\/01\/FuchKlara_HaslingerNagele_quadratisch.jpg\" alt=\"Klara Fuchs, quadratisch, Fotografin: Julia Spicker\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t  <\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      <h3><a href=\"https:\/\/www.haslinger-nagele.com\/en\/team\/klara-fuchs\/\">Klara Fuchs<\/a><\/h3>\n\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<em>Attorney-at-Law<\/em><br>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"mailto:klara.fuchs@haslinger-nagele.com\">klara.fuchs@haslinger-nagele.com<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<p class=\"smaller\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tHaslinger \/ Nagele Rechtsanw\u00e4lte GmbH<br>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      M\u00f6lker Bastei 5, 1010 Wien\t\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">If your company falls within the scope of the NISG 2026, you should begin as soon as possible with <strong>defining clear responsibilities<\/strong> and <strong>implementing the required measures<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, even if your company is not directly affected, the following applies: <strong>A solid cybersecurity concept<\/strong> is not only advisable but is increasingly expected by customers, business partners, and clients.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Disclaimer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This article is for general information only and does not replace legal advice. Haslinger \/ Nagele Rechtsanw\u00e4lte GmbH assumes no liability for the content and correctness of this article.<\/p>\n\n\n\t\t\t\t\t\t\t\t\t<div class=\"cards-thumbs-round align-full\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"container\">\n\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"row\">\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-lg-6\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"intro\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      <h2 class=\"light\">Author<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-lg-6\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"row\">\n\n\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t   \t\n\t\t\t\t\t\t\t\t\t\t   \t\t<div class=\"col-12 col-lg-4\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"item h-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t  \t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t  <img decoding=\"async\" src=\"https:\/\/www.haslinger-nagele.com\/wp-content\/uploads\/2026\/01\/FuchKlara_HaslingerNagele_quadratisch.jpg\" alt=\"Klara Fuchs, quadratisch, Fotografin: Julia Spicker\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h3>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t    \t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      Klara Fuchs\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t    \t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      Attorney-at-Law\t\t\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<div class=\"cards-thumbs-round align-full\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"container\">\n\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"row\">\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-lg-6\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"intro\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t      <h2 class=\"light\">Further information on this legal field can be found here<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-12 col-lg-6\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"row\">\n\n\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t   \t\n\t\t\t\t\t\t\t\t\t\t   \t\t<div class=\"col-12 col-lg-4\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"item h-100\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"image\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t  \t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t  <img decoding=\"async\" src=\"https:\/\/www.haslinger-nagele.com\/wp-content\/uploads\/2026\/03\/Roboter_1080x1080.png\" alt=\"Roboter mit Schild, quadratisch\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h3>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t    \t\t\t\t\t\t\t\t\t\t\t\t\t\t        <a href=\"https:\/\/www.haslinger-nagele.com\/en\/r\/data-protection-telecommunications-digitization\/\" \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t          target=\"_blank\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t          Data Protection, Telecommunications &amp; Digitalization\t\t\t\t\t\t\t\t\t\t\t\t\t\t        <\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t    \t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/h3>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t    \n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Implementation of the NIS 2 Directive in Austria:<br \/>\nNISG 2026 \u2013 New cybersecurity obligations for more companies.<\/p>\n","protected":false},"author":17,"featured_media":6159,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[162,135,31],"class_list":["post-24526","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artificial-intelligence-digitalization","category-data-protection-telecommunications-digitization","category-news"],"acf":[],"modified_by":"Tanja Kobler","_links":{"self":[{"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/posts\/24526","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/comments?post=24526"}],"version-history":[{"count":0,"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/posts\/24526\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/media\/6159"}],"wp:attachment":[{"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/media?parent=24526"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.haslinger-nagele.com\/en\/wp-json\/wp\/v2\/categories?post=24526"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}