{"text_format":"2","workbook":"xlsx","n_sheets":2,"sheets":["Coversheet","NIS2 Implementation in the EU"],"not_rendered":{"charts":0,"images":1,"macros":0,"external_links":0,"defined_names":0,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Coversheet","index":0,"n_rows":12,"n_cols":3,"rows_kept":12,"cut":false,"hidden":false,"merged":[]}
[]
[]
[null,"Prepared By:","Contributors:"]
[null,"CERHA HEMPEL Rechtsanwälte GmbH","Hans Kristoferitsch"]
[]
[]
[]
["NIS2 Implementation in the EU"]
[]
["Report Generated: 6/23/2026"]
[]
["View your report results on next tab"]

{"sheet":"NIS2 Implementation in the EU","index":1,"n_rows":6,"n_cols":2,"rows_kept":6,"cut":false,"hidden":false,"merged":[]}
["Question","Austria"]
["NIS2 Implementation Status"]
["Status of the legislative process","Enacted"]
["Status of the NIS2 Implementation Act","The \nAustrian NIS2 Implementation Act (\nNetz- und Informationssystemsicherheitsgesetz 2026, \nNISG 2026) came into force in December 2025.\n"]
["Significant deviations of the National Implementation Act from the NIS2 Directive, if any"," \n Closely modeled on the NIS2 Directive . There are some deviations as regards sector definitions and their interpretation. Furthermore, the NSIG 2026 additionally imposes an obligation to provide information on risk management measures implemented, in particular with regard to the network and information systems used and the security of supply chains, as well as the results of the risk analysis carried out (so-called self-declaration).The specific requirements for the audit also differ from those set out in the NIS2 Directive . \n Risk management measures are laid down in secondary legislation. The NISG 2026 provides, in this respect, that reference may also be made to European Union legal acts. These legal acts may also apply to sectors not covered by the European legal act. \n Similar to Germany, Sect 25 para 4 NISG 2026 excludes the attribution of corporate figures of affiliated and partner companies for the purposes of the Size-Cap-Rule , if an entity does not use a network and information system of affiliated or partner companies for the provision of services.  \n "]
["Date of entry into force of the Implementation Act","1 October 2026\n"]