On 1 October 2026, NIS2 became a reality for many Austrian companies. However, even if all IT and data security measures are adhered to, a cyber incident can never be ruled out. Sabine Pöhacker, Senior PR Expert at comm:unications, explains why crisis prevention should be prioritised.

Only one in four companies is prepared for a (cyber) crisis

Together with the industry publication Report Plus, comm:unications conducted a survey on the topic of ‘NIS2 & Communication’ in early September. The results are alarming: just two per cent of the 64 companies surveyed had already fully met the NIS2 requirements shortly before the amendment came into force. Just under a third had a finalised business continuity plan at the time of the survey, and only in one-fifth of the companies surveyed do the IT and communications departments regularly exchange information. There is also room for improvement when it comes to crisis communication: only one in four companies has begun preparations.

When IT fails, communication is key

A cybersecurity incident can quickly escalate into a corporate crisis. Despite the urgency of the situation and the intense time pressure, communication must be handled confidently and securely. A communication plan – ideally drawn up in advance – answers questions such as: Who informs whom, when, via which channel, with what content and in what tone?

IT and communications must work together

Whilst IT works to contain the incident and restore operations, communication provides guidance and helps to maintain trust. Responsibilities and structures should therefore be clarified in advance; key messages for different crisis scenarios can also be drafted in advance and adapted should a crisis arise. This saves time and creates room for manoeuvre. The human element is also of central importance: managers must act with confidence and empathy during crises and find the right words. With good preparation, communication can succeed in reassuring and de-escalating the situation – without glossing over the reality.

NIS2 as an opportunity to revamp crisis communication
NIS2 raises the bar for cybersecurity and crisis management. Companies should therefore use its implementation as an opportunity not only to review technical security measures and reporting channels, but also to bring their crisis communication resilience up to scratch.

Take action now!
comm:unications advises and supports companies in preparing themselves optimally for a crisis. In specialised workshops and simulation exercises led by experienced crisis experts, crisis scenarios are run through, communication and approval processes are defined, crisis manuals are drawn up, and senior managers are prepared for an emergency. Would you like to find out more, with no obligation? Contact crisis expert Sabine Pöhacker directly on 0664/2014076.