News

01.10.2026

NISG 2026 is in force

Since 1 October 2026, Austria's Network and Information Systems Security Act 2026 (NISG 2026) is in force. On the same day, the new Federal Office for Cybersecurity (Bundesamt für Cybersicherheit) started operations. For around 4,000 essential and important entities, this means:

Incident reporting: Significant cybersecurity i...

14.09.2026

The Cyber Risk Rating Scheme 2027 is here

On 14 September, the Cyber Risk Advisory Board approved the new CRR Scheme 2027, on which the Cyber Trust Labels are based. The 2027 version introduces a number of clarifications and stricter requirements: for a B rating, system administrators must in future use separate accounts for administrative tasks; critical vulnerabilities (CVSS ≥ 9.0) must be patched within a m...

14.07.2026

The ECSO Metaframework is here – a European approach to greater efficiency and trust

NIS2, DORA and the Cyber Resilience Act present organisations with new challenges in supply chain risk management. At the same time, the administrative burden is growing due to a constant stream of new security questionnaires and varying requirements. The new ECSO Meta-Framework offers an alternative approach: rather than introducing further standards, it focuses on harmonis...