Provable backups and a contingency plan from Austria.

In Austria, around 4,000 medium-sized and large companies from 18 sectors are directly affected (energy, health, transport, digital infrastructure, manufacturing and food, among others); NISG 2026 divides them into “essential” and “important entities”. The second group is considerably larger: affected companies have to include their supply chain in their risk management and ask suppliers and service providers for security evidence – and that route reaches tens of thousands of further businesses. A short assessment shows whether you are affected directly or indirectly; we help with the backup and contingency building block, while the overall assessment belongs in your compliance review.

The contingency plan is the overarching document: who decides what, in which order systems come back up, which recovery time you have committed to. The emergency response plan is the concrete procedure for one specific case – the failure of your virtualization host, for example. Emergency operations means that you actually keep working along that plan while the original environment is still down. NISG 2026 groups these levels under business continuity and names backup management, disaster recovery and crisis management explicitly. Managed Proxmox Backup Server supplies the technical part underneath: verified backups and the one-click start as a cloud VM in Austria.

No – and nobody can credibly promise that. Compliance with NISG 2026 is a company-wide matter. Managed Proxmox Backup Server covers the backup and contingency building block in a way you can document (verify jobs, tested disaster recovery, 3-2-1 redundancy, emergency operations with one click), and we support you in putting it in place. The remaining requirements such as incident reporting, access control, cyber hygiene and supply chain stay part of your overall concept.

Above all the core area of business continuity: backup management, disaster recovery and the preparation of emergency operations. In concrete terms: encrypted offsite backup, integrity checked by a verify job, a recovery test possible at any time and documented 3-2-1 redundancy. On top of that, the cryptography requirement through zero-knowledge encryption. The checklist further up this page maps the individual points.

NISG 2026 has been in force since January 2026; after the nine-month transition period, the measures have to be in place by October 1, 2026 at the latest. Registration with the authority follows by December 31, 2026, and the self-declaration of your measures by September 30, 2027. Because recovery tests and a documented contingency plan need lead time, the backup building block is a sensible first step that you can take at short notice.

You report significant security incidents to the responsible CSIRT in three stages: an early warning within 24 hours, a report including an assessment within 72 hours, and a final report within one month. Those are organizational processes and not part of a backup product. A dependable backup that restores quickly does shorten the time until you are running again – and with it the impact you have to report on.

Exclusively in Austrian data centers – ISO 27001 certified, with redundant connectivity, UPS and a diesel generator. Your contracting party is an Austrian GmbH with no US parent group, place of jurisdiction Austria. That makes data location and jurisdiction documented facts rather than claims.

No. A backup is necessary but not sufficient – NISG 2026 also calls for risk analysis, access control, training and incident reporting, among other things. Managed Proxmox Backup Server is the building block that covers data backup, disaster recovery and emergency operations; you build the contingency plan and the wider picture around it.