On December 12, 2025, a significant step to strengthen cybersecurity was taken in Austria. The National Council passed the Network and Information Security Act, or NIS2 for short, which was passed with the votes of the governing parties and the Greens. This law is a response to the rapidly changing challenges in cyberspace and aims to ensure the protection of critical infrastructure.

A new chapter in cybersecurity

The European Union’s Network and Information Security Directive, on which the NIS2 law is based, forms the basis for the new regulations. These aim to ensure comprehensive protection of critical facilities. These include water and energy suppliers as well as the food trade. The law complements the existing Resilience of Critical Facilities Act (RKEG), which regulates physical protection against threats such as terrorism and natural disasters.

What does NIS2 mean for Austria?

The NIS2 law creates a national safety net. Interior Minister Gerhard Karner emphasized that cyber security for people in Austria should be increased through advice and precautions. State Secretary Jörg Leichtfried added that NIS2 will function as a digital early warning system, similar to a seismographic network, that detects tremors before they cause damage.

  • Establishment of a cybersecurity authority within the Ministry of Interior
  • Relief for smaller companies and municipalities
  • High data protection and independent monitoring

Historical development of cybersecurity laws

The need for such a law arises from increasing digitalization and the associated risks. In recent years, cyberattacks on critical infrastructure have increased worldwide. Austria has responded to these threats with a series of measures that are now bundled in the NIS2 law.

Comparison with other countries

Compared to Germany and Switzerland, Austria has taken a similar path to strengthen cybersecurity with NIS2. Germany already passed the IT Security Act 2.0 in 2021, which pursues similar goals. Switzerland also relies on a strong cybersecurity strategy to protect its critical infrastructure.

Concrete effects on citizens and companies

For citizens, the NIS2 law means more security in the digital space. Companies that are considered critical infrastructure must adapt to new requirements. These include implementing security standards and reporting security incidents to the new cybersecurity authority.

One example of the impact is the need for energy suppliers to secure their networks against cyberattacks. This could require investment in new technology and training for employees.

Cybersecurity facts and figures

The threat of cyberattacks is real and increasing. According to a study by the Federal Ministry of the Interior, there were over 500 reported cyber incidents in Austria that affected critical infrastructure in 2024 alone. This figure underlines the urgency of the measures taken by the NIS2 law.

Expert opinions on the NIS2 directive

NEOS Secretary General Douglas Hoyos-Trauttmansdorff emphasized the importance of the NIS2 directive in strengthening the resilience of the Austrian cybersecurity architecture. National Council member Süleyman Zorba from the Greens emphasized that cybersecurity is a fundamental question of democracy and security policy.

Future prospects of cybersecurity

The implementation of the NIS2 law is an important step towards a secure digital future for Austria. Establishing a central cybersecurity authority will improve coordination and response to cyber incidents. In the long term, it is expected that the NIS2 law will make Austria better prepared for the challenges of the digital world.

conclusion

The Network and Information Security Act marks significant progress in Austria’s cybersecurity strategy. It not only offers protection for critical infrastructure, but also a solid foundation for the future development of cybersecurity in Austria. Citizens and companies are encouraged to familiarize themselves with the new regulations and review their own security measures.

Further information about the NIS2 law can be found on the website of the Federal Ministry of the Interior.