News

On 14 September, the Cyber Risk Advisory Board approved the new CRR Scheme 2027, on which the Cyber Trust Labels are based. The 2027 version introduces a number of clarifications and stricter requirements: for a B rating, system administrators must in future use separate accounts for administrative tasks; critical vulnerabilities (CVSS ≥ 9.0) must be patched within a maximum...

NIS2, DORA and the Cyber Resilience Act present organisations with new challenges in supply chain risk management. At the same time, the administrative burden is growing due to a constant stream of new security questionnaires and varying requirements. The new ECSO Meta-Framework offers an alternative approach: rather than introducing further standards, it focuses on harmonis...

Austria implemented the NIS 2 Directive with the NISG 2026 – and significantly increasing cybersecurity requirements. The NISG 2026 started on January 1st 2026 and will come into effect on October 1st 2026. The NISG 2026 affects essential and important facilities in critical and economically significant sectors.

What specifically can companies expect?

🔹 ...