Supply Chain Cybersecurity Programme
What this control requires
Assess and manage cybersecurity risks across the supply chain per NIS2. Conduct security assessments of critical suppliers. Include mandatory cybersecurity requirements in procurement contracts. Monitor supplier security posture continuously. Maintain critical supplier risk register with ratings.
Other NIS2 controls
EU_NIS2-CTRL-001 - Daily safeguarding reconciliationEU_NIS2-CTRL-002 - Critical ICT incident reportingEU_NIS2-CTRL-003 - GDPR breach notification workflowEU_NIS2-CTRL-004 - AML suspicious transaction monitoringEU_NIS2-CTRL-005 - Quarterly PCI vulnerability assessmentEU_NIS2-CTRL-006 - Outsourcing provider oversightEU_NIS2-CTRL-007 - DORA Register of Information maintenanceEU_NIS2-CTRL-008 - CTIF suspicious activity escalationEU_NIS2-CTRL-009 - NIS2 cyber resilience testingEU_NIS2-CTRL-010 - Instant payment availability monitoringNIS2-A20-001 - Management Body Cybersecurity Training and OversightNIS2-A21-001 - NIS2 Cybersecurity Risk Management Measures