Alessandro AleddaInsider Threat and Risk

ITER/ATAustria

What the record establishes for Austria: the bodies an insider event is reported to, the channel each takes, and the act that transposes the NIS2 Directive, Directive (EU) 2022/2555.

Recipients
4 of 4
Reporting address
Recorded
NIS2
Date not read
Terms moved
No
Sources cited
5
Last read
3 SEPTEMBER 2026

Recipients

Reached underBodyChannelSource
Data protection authorityGDPR, article 33Österreichische Datenschutzbehörde reportededpb members
CSIRT or competent authorityNIS2, article 23The NIS-Behörde, within the Bundesministerium für Inneres reported

https://nis.cert.at/checked 2026-09-03

There is no single address. The authority lists four platforms by sector: nis.cert.at for operators of essential services and digital service providers outside energy, nis.energy-cert.at for energy, nis.govcert.gv.at for public administration, and meldeportal.a-healthcert.at for health. All four take mandatory and voluntary reports, and the page does not distinguish NIS from NIS2 reporting.

nisg at faq · nis at meldungen
Financial supervisorDORA, article 19Finanzmarktaufsicht (FMA) reportedeba competent authorities
Market authorityMAR, article 17Österreichische Finanzmarktaufsicht (FMA) reportedesma mar nca

Transposition of NIS2 reported

ActNetz- und Informationssystemsicherheitsgesetz 2024, NISG 2024
In forcenot stated on the page read
RecipientThe NIS-Behörde, within the Bundesministerium für Inneres
Moves a termNo. None found. The three stages are the Directive's: a «24-Stunden-Zeitfenster» for the early warning, «binnen 72 Stunden» for the assessment, and the final report «ein Monat nach der Meldung».
StandingNamed on the authority's own page without a date of entry into force. The page names the NIS-Behörde as the authority and does not name a CSIRT, so this record does not name one either. Whether a designated team receives the report alongside the authority is not settled here.
Sourcenisg at faq

An event in Austria

The five types, each opened on this jurisdiction: the acts it obliges, the term on each, and where the report goes.