{"id":6759,"date":"2024-12-11T09:21:39","date_gmt":"2024-12-11T08:21:39","guid":{"rendered":"https:\/\/atb.law\/?post_type=blog-post&#038;p=6759"},"modified":"2025-03-14T11:05:55","modified_gmt":"2025-03-14T10:05:55","slug":"nis-2","status":"publish","type":"blog-post","link":"https:\/\/atb.law\/en\/blog-post\/nis-2\/","title":{"rendered":"The NIS-2 Directive: New Obligations for Companies"},"content":{"rendered":"<h2 id=\"page-was-ist-die-nis-2-richtlinie\"><strong>What is the NIS-2 Directive?<\/strong><\/h2>\n<p>The NIS 2 Directive replaces the previous NIS Directive from 2016 and significantly expands the scope. The goal is to better protect critical and important sectors against cyberattacks and to create a uniform level of protection throughout Europe. The directive now also includes companies that are not considered operators of critical infrastructures, but nevertheless have essential significance for the economy and society.<\/p>\n<h2 data-pm-slice=\"1 1 []\" id=\"page-wer-fallt-konkret-unter-die-nis-2-richtlinie\"><strong>Who specifically falls under the NIS-2 Directive?<\/strong><\/h2>\n<p data-pm-slice=\"1 1 []\">The directive distinguishes between essential entities and important entities:<\/p>\n<ul data-spread=\"true\">\n<li>\n<p>Essential entities: These include organizations operating in critical sectors such as energy supply, water management, healthcare, digital infrastructure, and finance. Their services are essential for the functioning of society, which is why particularly strict security requirements apply.<\/p>\n<\/li>\n<li>\n<p>Important entities: This includes companies that are not classified as critical, but nevertheless have significant importance for the economy or society. Examples include manufacturers of medical devices, providers of cloud services, or research centers.<\/p>\n<\/li>\n<\/ul>\n<p>The classification is based on specific criteria such as company size, market share, or the importance of the services. Smaller enterprises (SMEs) are generally exempt unless they provide essential services or operate in particularly high-risk sectors.<\/p>\n<h2 id=\"page-pflichten-fur-unternehmen\"><strong>Obligations for companies<\/strong><\/h2>\n<p>The NIS 2 Directive establishes a set of requirements that companies must implement. The most important obligations include:<\/p>\n<ul data-spread=\"true\">\n<li>\n<p>Risk management: Companies must implement measures to identify, assess, and mitigate risks. These include technical and organizational safeguards, such as firewalls, intrusion detection systems, or employee training.<\/p>\n<\/li>\n<li>\n<p>Reporting obligations: Security incidents that have a significant impact on service provision must be reported within 24 hours. Companies are required to submit a detailed report on the incident within 72 hours.<\/p>\n<\/li>\n<li>\n<p>Responsibilities of management: The NIS-2 Directive emphasizes the role of management. They bear the responsibility for ensuring that the requirements are met and can be held personally liable for violations.<\/p>\n<\/li>\n<li>\n<p>Access controls and supply chain security: Companies must ensure that all partners and suppliers also comply with security standards in order to avoid vulnerabilities in the supply chain.<\/p>\n<\/li>\n<li>Emergency plans and recoverability: The development of emergency plans and the ability to recover after an incident are essential. This includes tests and exercises to ensure the effectiveness of the plans.<\/li>\n<\/ul>\n<h2 id=\"page-umsetzung-in-osterreich\"><strong>Implementation in Austria<\/strong><\/h2>\n<p>Austria \u2013 like the other member states \u2013 should have transposed the requirements of the NIS 2 Directive by October 17, 2024. Although a corresponding national NISG 2024 draft already exists, it has not yet been passed. Despite this failure, it is clear that the NISG 2024 will definitely come. Companies that fall within the scope of the directive should therefore begin preparations now.<\/p>\n<h2 id=\"page-konsequenzen-bei-nichtbeachtung\"><strong>Consequences of non-compliance<\/strong><\/h2>\n<p>Failure to comply with the requirements of the NIS 2 Directive can have significant legal and financial consequences. Fines of up to 10 million euros or 2 % of global annual revenue may be imposed. In addition, management may be held personally liable.<\/p>\n<h2 id=\"page-fazit\"><strong>Conclusion<\/strong><\/h2>\n<p>The NIS 2 Directive presents companies in Austria with new challenges, but also offers the opportunity to sustainably improve cybersecurity standards. Companies should start implementation early to avoid legal risks and security gaps. We are happy to support you with the analysis and implementation of the NIS 2 requirements. For further information and individual consultation, please contact <a href=\"https:\/\/atb.law\/en\/anela-bloech\/\">Anela Bl\u00f6ch<\/a> at the phone number <a href=\"tel:+4313912345\">01 3912345<\/a> or by email <a href=\"mailto:office@atb.law\">office@atb.law<\/a> available.<\/p>\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"template":"","categories":[31],"class_list":["post-6759","blog-post","type-blog-post","status-publish","has-post-thumbnail","hentry","category-unternehmensrecht"],"acf":[],"post-kategorie":"31","_post-kategorie":"field_66d947537140a","post-kurzbeschreibung":"Erfahren Sie, ob Sie von der NIS 2 betroffen sein k\u00f6nnen","_post-kurzbeschreibung":"field_66d949fe1efe2","post-beitragsbild":"6761","_post-beitragsbild":"field_66d94a4a1efe3","post-author_post-author-name":"Anela Bl\u00f6ch","_post-author_post-author-name":"field_66d94a801efe5","post-author_post-author-foto":"6731","_post-author_post-author-foto":"field_66d94aa11efe6","post-author":"","_post-author":"field_66d94ee2827ca","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Pflichten f\u00fcr Unternehmen aus der NIS 2 Richtlinie<\/title>\n<meta name=\"description\" content=\"Die NIS-2-Richtlinie legt eine Reihe von Anforderungen fest, die Unternehmen umsetzen m\u00fcssen. Erfahren Sie, ob Sie unter die Richtlinie fallen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/atb.law\/en\/blog-post\/nis-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pflichten f\u00fcr Unternehmen aus der NIS 2 Richtlinie\" \/>\n<meta property=\"og:description\" content=\"Die NIS-2-Richtlinie legt eine Reihe von Anforderungen fest, die Unternehmen umsetzen m\u00fcssen. Erfahren Sie, ob Sie unter die Richtlinie fallen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/atb.law\/en\/blog-post\/nis-2\/\" \/>\n<meta property=\"og:site_name\" content=\"ATB.LAW\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-14T10:05:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/atb.law\/wp-content\/uploads\/2024\/12\/088A7597-46-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1708\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/\",\"url\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/\",\"name\":\"Pflichten f\u00fcr Unternehmen aus der NIS 2 Richtlinie\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/088A7597-46-scaled.jpg\",\"datePublished\":\"2024-12-11T08:21:39+00:00\",\"dateModified\":\"2025-03-14T10:05:55+00:00\",\"description\":\"Die NIS-2-Richtlinie legt eine Reihe von Anforderungen fest, die Unternehmen umsetzen m\u00fcssen. Erfahren Sie, ob Sie unter die Richtlinie fallen.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/088A7597-46-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/088A7597-46-scaled.jpg\",\"width\":2560,\"height\":1708,\"caption\":\"NIS 2 Richtlinie\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/atb.law\\\/blog-post\\\/nis-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/atb.law\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Die NIS-2-Richtlinie: Neue Pflichten f\u00fcr Unternehmen\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/atb.law\\\/#website\",\"url\":\"https:\\\/\\\/atb.law\\\/\",\"name\":\"atb Rechtsanw\u00e4lte\",\"description\":\"Rechtsanwaltskanzlei in Wien\",\"publisher\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/atb.law\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/atb.law\\\/#organization\",\"name\":\"atb Rechtsanw\u00e4lte\",\"url\":\"https:\\\/\\\/atb.law\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/ATB_Rechtsanwaelte_site-logo-beige.png\",\"contentUrl\":\"https:\\\/\\\/atb.law\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/ATB_Rechtsanwaelte_site-logo-beige.png\",\"width\":1572,\"height\":1110,\"caption\":\"atb Rechtsanw\u00e4lte\"},\"image\":{\"@id\":\"https:\\\/\\\/atb.law\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Obligations for companies under the NIS 2 Directive","description":"The NIS 2 Directive establishes a set of requirements that companies must implement. Find out whether you fall under the directive.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/atb.law\/en\/blog-post\/nis-2\/","og_locale":"en_US","og_type":"article","og_title":"Pflichten f\u00fcr Unternehmen aus der NIS 2 Richtlinie","og_description":"Die NIS-2-Richtlinie legt eine Reihe von Anforderungen fest, die Unternehmen umsetzen m\u00fcssen. Erfahren Sie, ob Sie unter die Richtlinie fallen.","og_url":"https:\/\/atb.law\/en\/blog-post\/nis-2\/","og_site_name":"ATB.LAW","article_modified_time":"2025-03-14T10:05:55+00:00","og_image":[{"width":2560,"height":1708,"url":"https:\/\/atb.law\/wp-content\/uploads\/2024\/12\/088A7597-46-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/atb.law\/blog-post\/nis-2\/","url":"https:\/\/atb.law\/blog-post\/nis-2\/","name":"Obligations for companies under the NIS 2 Directive","isPartOf":{"@id":"https:\/\/atb.law\/#website"},"primaryImageOfPage":{"@id":"https:\/\/atb.law\/blog-post\/nis-2\/#primaryimage"},"image":{"@id":"https:\/\/atb.law\/blog-post\/nis-2\/#primaryimage"},"thumbnailUrl":"https:\/\/atb.law\/wp-content\/uploads\/2024\/12\/088A7597-46-scaled.jpg","datePublished":"2024-12-11T08:21:39+00:00","dateModified":"2025-03-14T10:05:55+00:00","description":"The NIS 2 Directive establishes a set of requirements that companies must implement. Find out whether you fall under the directive.","breadcrumb":{"@id":"https:\/\/atb.law\/blog-post\/nis-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/atb.law\/blog-post\/nis-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atb.law\/blog-post\/nis-2\/#primaryimage","url":"https:\/\/atb.law\/wp-content\/uploads\/2024\/12\/088A7597-46-scaled.jpg","contentUrl":"https:\/\/atb.law\/wp-content\/uploads\/2024\/12\/088A7597-46-scaled.jpg","width":2560,"height":1708,"caption":"NIS 2 Richtlinie"},{"@type":"BreadcrumbList","@id":"https:\/\/atb.law\/blog-post\/nis-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/atb.law\/"},{"@type":"ListItem","position":2,"name":"Die NIS-2-Richtlinie: Neue Pflichten f\u00fcr Unternehmen"}]},{"@type":"WebSite","@id":"https:\/\/atb.law\/#website","url":"https:\/\/atb.law\/","name":"atb Attorneys at Law","description":"Law firm in Vienna","publisher":{"@id":"https:\/\/atb.law\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/atb.law\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/atb.law\/#organization","name":"atb Attorneys at Law","url":"https:\/\/atb.law\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/atb.law\/#\/schema\/logo\/image\/","url":"https:\/\/atb.law\/wp-content\/uploads\/2024\/05\/ATB_Rechtsanwaelte_site-logo-beige.png","contentUrl":"https:\/\/atb.law\/wp-content\/uploads\/2024\/05\/ATB_Rechtsanwaelte_site-logo-beige.png","width":1572,"height":1110,"caption":"atb Rechtsanw\u00e4lte"},"image":{"@id":"https:\/\/atb.law\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/blog-post\/6759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/blog-post"}],"about":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/types\/blog-post"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/media\/6761"}],"wp:attachment":[{"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/media?parent=6759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/atb.law\/en\/wp-json\/wp\/v2\/categories?post=6759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}