What is in a NIS2 supplier questionnaire, and how do I answer it?

Questions about how you protect the customer's data and access, how you handle incidents, and whether you can prove it. Typical topics: governance and who is responsible, access control and multi-factor authentication, privileged access to the customer, patching, backups, logging and monitoring, incident detection and notification times, subcontractors, data location and staff training. Answer each question truthfully and briefly, attach evidence where you have it, and mark planned improvements with a date. Do not answer yes to something you cannot show. Keep one master version and update it, because many customers ask similar questions. NetSenX can supply part of your evidence for monitoring: detection records, the audit log and PDF reports from the Starter plan.

Read next

← All 35 questions on MSPs and MSSPsAll topics