Cybersecurity – Focus on NIS2/NISG 2026

As digitalisation continues to transform business processes and ways of working, the risk of cyberattacks is increasing in parallel. To address this threat effectively, the NIS2 Directive, implemented in Austria through NISG 2026, imposes stricter security requirements on organisations. At its core, however, compliance is not about ticking a regulatory box. It is about systematically identifying and assessing cyber risks and reducing them through appropriate risk management measures, with the ultimate goal of building genuine resilience against real-world threats. 

The impact extends beyond essential and important entities themselves. Organisations that form part of their supply chains must also address the requirements, as cyberattacks rarely target a single company in isolation. Vulnerabilities at suppliers and service providers are a preferred point of entry, allowing attackers to move through the supply chain to reach their intended targets. Essential and important entities must therefore incorporate supplier security into their own risk management processes and pass these requirements on to their partners. Organisations that can demonstrate appropriate safeguards remain reliable and competitive partners within the supply chain. 

• Security concept for network and information systems 

• Risk management 

• Incident handling 

• Business continuity and crisis management 

• Supply chain security 

• Security in the acquisition, development and maintenance of IT systems 

• Assessment of the effectiveness of security measures 

• Cyber hygiene and training 

• Cryptography 

• Personnel security 

• Access control 

• Asset management 

• Physical and environmental security 

These areas provide the framework for our work with you, assessing your maturity level in each area, identifying gaps and defining prioritised, appropriate measures aligned with your actual risk profile, turning a regulatory requirement into a tangible security benefit. 

Two key questions arise: Is my organisation affected, and if so, how can the requirements be implemented in practice? Our Bechtle 360° approach not only helps you prepare for NISG 2026 but also elevates your information security to the next level. 

The first step is a GAP analysis, which shows how mature your organisation’s cybersecurity capabilities really are. Based on the results, we define measures that are prioritised according to risk and impact. Our Cybersecurity Assessment provides a reliable overview in a short time. 

• Identify security gaps 

• Recognise areas requiring urgent action 

• Derive practical recommendations (prioritised action plan) 

• Provide informed recommendations for suitable security measures and products 

Protective technologies such as next‑generation firewalls, intrusion‑prevention systems, anti‑spam and anti‑virus solutions are now standard practice. They play a crucial role in reducing the attack surface and limiting opportunities for cybercriminals.

A key element of modern network security is network segmentation, increasingly implemented through a zero‑trust approach using Zero Trust Network Access (ZTNA). Modern network security must account for a growing number of mobile and remote endpoints that operate beyond the traditional corporate perimeter. These devices require the same level of protection and access control as systems within the internal network.

As a consequence, the security perimeter must move closer to the endpoint, ensuring protection at the point of access itself. Unlike traditional models, a zero-trust architecture assumes that no device, user or connection can be trusted by default. Even within an active session, access can be continuously verified and reassessed. Software‑defined perimeters apply zero-trust principles to protect networks and data by shifting the traditional perimeter into the applications that manage access. Users and applications are granted access only to the specific resources they need at that moment – without visibility into the wider network structure.

With the Bechtle Cyber Defence Centre, we offer two proven models for establishing a Security Operations Centre (SOC) tailored to your organisation. The primary objective is to identify suspicious activity at an early stage, investigate it systematically, and respond effectively.

In the traditional model, a SIEM (Security Information and Event Management) platform is used to collect and correlate events from multiple customer systems. These events are normalised and analysed using defined rule sets and threat‑intelligence information. Potential threats are identified when individual events – or specific combinations of events – trigger alerts. This enables security teams to detect suspicious patterns, assess possible attack scenarios, and take appropriate countermeasures in a timely manner.

The next‑generation model combines highly automated technologies with forensic tools for monitoring networks and operating systems, enabling real‑time threat detection. Using artificial intelligence and behavioural analytics, the platform continuously learns and can distinguish between normal and anomalous behaviour. This allows threats to be contained immediately, before they escalate. Endpoint and network technologies are centrally managed and orchestrated via a Security Orchestration, Automation and Response (SOAR) platform and are operated around the clock by Bechtle security analysts.

Protect your systems actively and effectively against internal and external threats. With Bechtle’s support, cyberattacks lose their impact. We advise on, implement and operate your Cyber Defence Centre around the clock, 365 days a year. Get in touch with us to protect sensitive data from theft and sabotage.