CyberTrust
The Cyber Trust Austria label (now marketed across borders as Cyber Trust Europe) is a voluntary cybersecurity quality label for companies, developed by the Kompetenzzentrum Sicheres Österreich (KSÖ) with the credit agency KSV1870 and operated by Cyber Trust Services GmbH.
It is built on the KSV1870 Cyber Risk Rating scheme, a questionnaire-based rating of an organization's basic cyber hygiene that Austrian companies increasingly use to screen suppliers.
The label comes in tiers: Standard and Silver are based on a validated self-declaration against the rating questionnaire (Silver corresponds to a KSV1870 CyberRisk A rating and its 25 questions), Gold requires an on-site audit by a qualified auditor accredited under Austria's NIS Act (corresponding to an A+ rating), and a Platinum tier exists for the most demanding profile.
Labels are valid for one year.
The label is a supply chain trust signal rather than a regulatory requirement. In writing, an applicant needs an information security policy, an asset and system overview, evidence for the questionnaire items (patching, backups, access control, MFA, awareness training, incident handling, supplier management), and for Gold the documentation an auditor will sample against the requirements catalog.
help
Who has to comply
Voluntary. Any company, primarily Austrian and Central European SMEs and mid-sized firms, that wants to demonstrate baseline cyber hygiene to customers and insurers; some larger Austrian buyers ask suppliers for the label or the underlying KSV1870 rating.
What the assessor asks to see
Completed KSV1870 Cyber Risk Rating questionnaire (25 questions for A, extended set for A+); information security policy; asset overview; patch and update management records; backup and recovery evidence; access control and MFA configuration; awareness training records; incident response procedure; supplier and service provider management; for Gold, on-site audit sampling of these controls against the requirements catalog.
Who helps with CyberTrust
Austrian IT security consultancies and managed service providers prepare companies for the questionnaire and Gold audit; the scheme publishes the requirements catalog so preparation is straightforward. Engagements are typically short, a few weeks.
Firms that name this framework in their own material. A listing is not a recommendation. Each firm can confirm its own.
Consultants
Be the first CyberTrust consultant listed here
The people reading this are working out who can help them get there.
Who assesses CyberTrust
For Standard and Silver, the scheme operator validates the self-declaration for completeness and plausibility. For Gold, a qualified auditor accredited under Section 18 of the Austrian NIS Act (NISG) performs an audit. Platinum follows the scheme's stated audit requirements.
Accredited by For Gold audits, auditor qualification rests on accreditation as a qualified body under the Austrian NIS Act (overseen by the Austrian NIS authority); the scheme operator issues the label.
Public register of assessors: cyber-trust-europe.eu ↗
Assessors
Be the first CyberTrust assessor listed here
This page is read by the organizations looking for someone to certify them.
Tools for CyberTrust
Tools that name this framework in their own material.
Tools
Be the first tool listed for CyberTrust
Buyers comparing software for this standard land here first.
Need a hand implementing it?
Find a Consultant for CyberTrust
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
Not sure where to start?
Get Help with CyberTrust
Tell us what you are trying to put in place. We will point you to the right tool, a consultant who can implement it, or both.