Benutzerbeiträge von „Jhospes“

3. Juni 2025

• 11:3811:38, 3. Jun. 2025 Unterschied Versionen +39 N Translations:Network and Information Security Directive (NIS2-RL)/95/en Die Seite wurde neu angelegt: „==== Definition of Management Body ====“ aktuell
• 11:3811:38, 3. Jun. 2025 Unterschied Versionen +38 N Translations:Network and Information Security Directive (NIS2-RL)/94/en Die Seite wurde neu angelegt: „=== National Implementation (NISG) ===“ aktuell
• 11:3811:38, 3. Jun. 2025 Unterschied Versionen +730 N Translations:Network and Information Security Directive (NIS2-RL)/93/en Die Seite wurde neu angelegt: „* **Accountability**: Corporate leadership (e.g., board, management) is responsible for approving and overseeing the implementation of risk management obligations. * **Personal liability**: Management bodies may be held personally accountable for non-compliance with these obligations. * **Training obligation**: Management bodies must undergo cybersecurity training and ensure such training is also available to their employees. * **Skill development**: Trai…“ aktuell
• 11:3811:38, 3. Jun. 2025 Unterschied Versionen +160 N Translations:Network and Information Security Directive (NIS2-RL)/91/en Die Seite wurde neu angelegt: „The NIS2 Directive introduces specific governance obligations targeting the executive and management levels, emphasizing their active role. Key aspects include:“ aktuell
• 11:3811:38, 3. Jun. 2025 Unterschied Versionen +22 N Translations:Network and Information Security Directive (NIS2-RL)/90/en Die Seite wurde neu angelegt: „=== NIS2 Directive ===“ aktuell
• 11:3711:37, 3. Jun. 2025 Unterschied Versionen +63 N Translations:Network and Information Security Directive (NIS2-RL)/89/en Die Seite wurde neu angelegt: „== Governance Obligations and Liability of Management Bodies ==“ aktuell
• 11:0111:01, 3. Jun. 2025 Unterschied Versionen +56.863 N Network and Information Security Directive (NIS2-RL)/en Die Seite wurde neu angelegt: „{| class="wikitable" !Goals !Scope !Content<ref>https://www.nis.gv.at/nis-2-richtlinie.html</ref> !Synergy !Consequences |- |Development of cybersecurity capabilities (Recital 1 NIS2) |Annex I (high-criticality sectors) |Obligation for all MS to adopt national cybersecurity strategies (Art 7 NIS2) |Data protection management system |Essential entities: fines of at least EUR 10 million or 2% of global annual turnover |- |Achieving a high common level of cy…“
• 10:4910:49, 3. Jun. 2025 Unterschied Versionen +319 N Translations:Network and Information Security Directive (NIS2-RL)/88/en Die Seite wurde neu angelegt: „Entities may be required to submit a list of implemented risk management measures to the cybersecurity authority. They may also be required to undergo an independent audit, with the resulting report signed by a management body. For important entities, this obligation applies only under certain conditions (§ 33 NISG).“ aktuell
• 10:4910:49, 3. Jun. 2025 Unterschied Versionen +331 N Translations:Network and Information Security Directive (NIS2-RL)/87/en Die Seite wurde neu angelegt: „The evaluation must include products and services of direct suppliers and providers. Where services depend significantly on subcontractors, these must also be included in the assessment. This applies to both new procurements and existing contracts<ref>https://www.parlament.gv.at/dokument/XXVII/ME/326/fname_1621121.pdf S 34</ref>.“ aktuell
• 10:4910:49, 3. Jun. 2025 Unterschied Versionen +100 N Translations:Network and Information Security Directive (NIS2-RL)/86/en Die Seite wurde neu angelegt: „Entities must identify, assess, and manage risks and dependencies in service provider relationships.“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +207 N Translations:Network and Information Security Directive (NIS2-RL)/85/en Die Seite wurde neu angelegt: „* Assessment of supplier and provider vulnerabilities * Consideration of the overall quality and resilience of products and services * Review of suppliers’ cybersecurity practices and development processes“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +75 N Translations:Network and Information Security Directive (NIS2-RL)/84/en Die Seite wurde neu angelegt: „Special focus is placed on supply chain risk management (§ 32(2)(3) NISG):“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +143 N Translations:Network and Information Security Directive (NIS2-RL)/83/en Die Seite wurde neu angelegt: „* Protection from system failures, human error, malicious acts, and natural events * Personnel security * Appropriate access control strategies“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +126 N Translations:Network and Information Security Directive (NIS2-RL)/81/en Die Seite wurde neu angelegt: „Measures must follow a cross-hazard approach, covering both cybersecurity and physical security (§ 32(2)(2) NISG), including:“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +267 N Translations:Network and Information Security Directive (NIS2-RL)/80/en Die Seite wurde neu angelegt: „Implementation costs must be proportionate to the risks facing the network and information systems (§ 32(2)(1)(b) NISG)<ref>https://www.parlament.gv.at/dokument/XXVII/ME/326/fname_1621121.pdf S 34</ref>. No excessive financial or administrative burdens should arise.“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +153 N Translations:Network and Information Security Directive (NIS2-RL)/79/en Die Seite wurde neu angelegt: „* State of the art (§ 32(2)(1)(a) NISG) * Relevant national, European, and international standards (e.g., Regulation (EU) No 1025/2012) * Best practices“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +23 N Translations:Network and Information Security Directive (NIS2-RL)/78/en Die Seite wurde neu angelegt: „Entities must consider:“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +145 N Translations:Network and Information Security Directive (NIS2-RL)/77/en Die Seite wurde neu angelegt: „§ 32(2) NISG obliges affected entities to ensure a level of security appropriate to the existing risk, thus reinforcing the risk-based approach.“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +79 N Translations:Network and Information Security Directive (NIS2-RL)/76/en Die Seite wurde neu angelegt: „https://www.parlament.gv.at/dokument/XXVII/ME/326/fname_1621121.pdf S 33</ref>.“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +501 N Translations:Network and Information Security Directive (NIS2-RL)/75/en Die Seite wurde neu angelegt: „§ 32(1) NISG refers to Annex 3<ref>https://www.parlament.gv.at/dokument/XXVII/ME/326/fname_1621122.pdf</ref>, which lists refined measures based on Article 21 NIS2. The list reflects EU-level efforts within the NIS Cooperation Group<ref>https://www.parlament.gv.at/dokument/XXVII/ME/326/fname_1621121.pdf S 33</ref>. Measures are categorized as organizational, technical, and operational<ref>Organizational: a binding policy; Technical: e.g., firewalls; Oper…“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +38 N Translations:Network and Information Security Directive (NIS2-RL)/74/en Die Seite wurde neu angelegt: „§ 32 NISG implements Article 21 NIS2.“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen +40 N Translations:Network and Information Security Directive (NIS2-RL)/73/en Die Seite wurde neu angelegt: „==== National Implementation (NISG) ====“ aktuell
• 10:4810:48, 3. Jun. 2025 Unterschied Versionen −420 Translations:Network and Information Security Directive (NIS2-RL)/71/en Der Seiteninhalt wurde durch einen anderen Text ersetzt: „These include:“ aktuell Markierung: Ersetzt
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen −15 Translations:Network and Information Security Directive (NIS2-RL)/70/en Keine Bearbeitungszusammenfassung aktuell
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +434 N Translations:Network and Information Security Directive (NIS2-RL)/72/en Die Seite wurde neu angelegt: „* Policies for risk analysis and information system security * Incident handling * Business continuity * Supply chain management * Evaluation procedures for cybersecurity measures * Use of cryptography and encryption * Personnel security * Access controls and asset management * Cybersecurity training * Security in procurement * Development and maintenance of network and information systems * Secure authentication and communication“ aktuell
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +434 N Translations:Network and Information Security Directive (NIS2-RL)/71/en Die Seite wurde neu angelegt: „* Policies for risk analysis and information system security * Incident handling * Business continuity * Supply chain management * Evaluation procedures for cybersecurity measures * Use of cryptography and encryption * Personnel security * Access controls and asset management * Cybersecurity training * Security in procurement * Development and maintenance of network and information systems * Secure authentication and communication“
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +121 N Translations:Network and Information Security Directive (NIS2-RL)/70/en Die Seite wurde neu angelegt: „Article 21(2) NIS2 defines ten concrete measures and minimum requirements that Member States must mandate. These include:“
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +123 N Translations:Network and Information Security Directive (NIS2-RL)/69/en Die Seite wurde neu angelegt: „* State of the art * Cost of implementation * Size of the entity * Probability of security risks * Other individual factors“ aktuell
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +331 N Translations:Network and Information Security Directive (NIS2-RL)/68/en Die Seite wurde neu angelegt: „The regulation of risk management measures under NIS2 follows a risk-based and proportionate approach<ref>https://www.handelsverband.at/fileadmin/content/Presse_Publikationen/Presseaussendungen/2024/03_Mar/2024-03_HV_NIS2-Leitfaden_extra.pdf</ref>. Companies must consider the following factors when implementing security measures:“ aktuell
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +24 N Translations:Network and Information Security Directive (NIS2-RL)/67/en Die Seite wurde neu angelegt: „==== NIS2 Directive ====“ aktuell
• 10:4710:47, 3. Jun. 2025 Unterschied Versionen +32 N Translations:Network and Information Security Directive (NIS2-RL)/66/en Die Seite wurde neu angelegt: „=== Risk Management Measures ===“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +20 N Translations:Network and Information Security Directive (NIS2-RL)/65/en Die Seite wurde neu angelegt: „== Key Provisions ==“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +102 N Translations:Network and Information Security Directive (NIS2-RL)/64/en Die Seite wurde neu angelegt: „As of the time of drafting, the NIS2 Directive has not yet been transposed into Austrian national law.“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +22 N Translations:Network and Information Security Directive (NIS2-RL)/63/en Die Seite wurde neu angelegt: „=== Temporal Scope ===“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +28 N Translations:Network and Information Security Directive (NIS2-RL)/62/en Die Seite wurde neu angelegt: „For details, see § 28 NISG.“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +415 N Translations:Network and Information Security Directive (NIS2-RL)/61/en Die Seite wurde neu angelegt: „Different rules apply to providers of public communications networks, publicly available electronic communication services, DNS providers, TLD registries, domain name registration services, cloud computing service providers, data center service providers, content delivery networks, managed service providers, managed security service providers, online marketplaces, search engines, and social networking platforms.“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +208 N Translations:Network and Information Security Directive (NIS2-RL)/60/en Die Seite wurde neu angelegt: „Essential and important entities, as well as domain name registration service providers, are subject to the provisions of this chapter only with regard to their establishments located in Austria (§ 28 NISG).“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +25 N Translations:Network and Information Security Directive (NIS2-RL)/59/en Die Seite wurde neu angelegt: „=== Territorial Scope ===“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +255 N Translations:Network and Information Security Directive (NIS2-RL)/58/en Die Seite wurde neu angelegt: „Entities not directly within the scope may still be contractually required to comply with NIS2 obligations through agreements with in-scope entities. In such cases, it must be assessed which parts of the obligations apply to the indirectly covered entity.“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +23 N Translations:Network and Information Security Directive (NIS2-RL)/57/en Die Seite wurde neu angelegt: „===== Delineation =====“ aktuell
• 10:4610:46, 3. Jun. 2025 Unterschied Versionen +376 N Translations:Network and Information Security Directive (NIS2-RL)/56/en Die Seite wurde neu angelegt: „Entities in the public administration sector whose activities are primarily related to national security, public safety, military defense, or law enforcement, as well as institutions of higher education, judiciary, legislative bodies (including the Parliamentary Directorate), and the Austrian National Bank, are not considered essential or important entities (§ 24(6) NISG).“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +307 N Translations:Network and Information Security Directive (NIS2-RL)/55/en Die Seite wurde neu angelegt: „Entities already subject to sector-specific EU legislation that mandates their own risk management or incident reporting—ensuring at least equivalent cybersecurity—and that are formally recognised as such by regulation (§ 27 NISG), are exempt. This may apply to entities covered by the DORA Regulation.“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +22 N Translations:Network and Information Security Directive (NIS2-RL)/54/en Die Seite wurde neu angelegt: „===== Exceptions =====“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +237 N Translations:Network and Information Security Directive (NIS2-RL)/53/en Die Seite wurde neu angelegt: „Additionally, public authorities meeting the criteria in § 25(3) NISG fall under this category. These include federal and state institutions without a commercial mandate whose decisions impact individual rights in cross-border contexts.“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +378 N Translations:Network and Information Security Directive (NIS2-RL)/52/en Die Seite wurde neu angelegt: „Regardless of size, the following are considered essential entities under § 24(1)(1) NISG: * Qualified trust service providers * TLD name registries * DNS service providers * Federal-level public administration entities * Entities designated as essential by the cybersecurity authority (§ 26(1)) * Entities classified as critical under Directive (EU) 2022/2557 (CER Directive)“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +34 N Translations:Network and Information Security Directive (NIS2-RL)/51/en Die Seite wurde neu angelegt: „===== Size-independent Scope =====“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +262 N Translations:Network and Information Security Directive (NIS2-RL)/50/en Die Seite wurde neu angelegt: „Austria did not make use of the option to automatically classify previous “operators of essential services” or include municipalities and educational institutions within the scope.<ref>https://www.parlament.gv.at/dokument/XXVII/ME/326/fname_1621119.pdf</ref>“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +74 N Translations:Network and Information Security Directive (NIS2-RL)/49/en Die Seite wurde neu angelegt: „A subset of these entities is designated as essential under § 24(1) NISG.“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +109 N Translations:Network and Information Security Directive (NIS2-RL)/48/en Die Seite wurde neu angelegt: „operating in sectors listed in Annexes 1 and 2 of the NISG are deemed important entities under § 42(2) NISG.“ aktuell
• 10:4410:44, 3. Jun. 2025 Unterschied Versionen +33 N Translations:Network and Information Security Directive (NIS2-RL)/47/en Die Seite wurde neu angelegt: „Large or medium-sized enterprises“ aktuell