Banks & financial services
Supervised by the FMA and subject to the requirements of DORA. Incomplete e-mail authentication can be rated as a deficiency in operational resilience audits.
What different industries in Austria need to consider
Industry focus Austria
Click on an industry for detailed insights into regulatory requirements.
Critical infrastructure & energy
Statutory reporting obligations and high security standards under NISG 2026. Protection against targeted spear phishing.
Automotive & suppliers
Many car manufacturers contractually require TISAX® labels, on top of strict group requirements. Domain security is assessed as an essential building block of the ISMS.
Healthcare & pharma
Protecting sensitive patient data and confidential medical communication against identity abuse.
Construction & trades
Prevention of CEO fraud and invoice fraud by unauthorised third parties on large projects.
SMEs & retail
Meeting EU supply chain laws with the required audit evidence and protection against spam filter problems.
Important notice & disclaimer (no legal advice)
The content, analyses and audit reports provided on this website serve exclusively as general information about technical security standards (such as SPF, DKIM, DMARC) and related regulatory frameworks (including NIS2 and the GDPR). They expressly do not constitute legal, tax or official compliance advice and cannot replace individual advice from qualified lawyers or specialised experts. Although prepared with care, we accept no liability for the accuracy, completeness or timeliness of the regulatory information presented. Liability is excluded to the extent permitted by law; this does not apply in cases of intent or gross negligence or to personal injury. The operators of linked external websites are solely responsible for their content; no legal violations were apparent at the time of linking.