Security Level Under NIS-2
Robust enough for the most demanding regulatory expectations, tailored to your setup.
What this is about
NIS-2 (implemented in Austria as NISG 2026, effective October 1, 2026) is the regulatory prompt for this service. You need IT that runs reliably and well-documented regardless of any regulator anyway. Regulatory conformity is then not far off, and a welcome by-product.
How we work
We build security incrementally: risk-based, proportionate, documented. No "everything at once." No scare-workshop. We design an architecture tailored to your needs that works in day-to-day operation.
Who this is for
- Directly in scope: organisations in NIS-2 sectors (energy, health, drinking water, digital infrastructure, B2B ICT, public administration, etc.).
- Contractually bound: suppliers and service providers to those organisations.
Supply-chain effect
Anyone working for an organisation covered by NIS-2 gets contractually obliged to security measures, even if they wouldn't be directly obliged under NISG2026 themselves. If you've received such a request: A Security Assessment is the fastest path to an honest read on what measures are necessary or worthwhile.
