# What is in a NIS2 supplier questionnaire, and how do I answer it?

Questions about how you protect the customer's data and access, how you handle incidents, and whether you can prove it. Typical topics: governance and who is responsible, access control and multi-factor authentication, privileged access to the customer, patching, backups, logging and monitoring, incident detection and notification times, subcontractors, data location and staff training. Answer each question truthfully and briefly, attach evidence where you have it, and mark planned improvements with a date. Do not answer yes to something you cannot show. Keep one master version and update it, because many customers ask similar questions. NetSenX can supply part of your evidence for monitoring: detection records, the audit log and PDF reports from the Starter plan.

FAQ: [MSPs and MSSPs](https://netsenx.com/en/faq/msp) · https://netsenx.com/en/faq/what-is-in-a-nis2-supplier-questionnaire

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/partners

## Related questions

- [What NIS2 evidence can an MSP give its clients every quarter?](https://netsenx.com/en/faq/what-nis2-evidence-can-an-msp-give-clients-every-quarter)
- [How can an MSP give clients incident evidence quickly?](https://netsenx.com/en/faq/how-can-an-msp-give-clients-incident-evidence-quickly)
- [Does an EU MSP need an EU-hosted security vendor for its clients?](https://netsenx.com/en/faq/does-an-eu-msp-need-an-eu-hosted-security-vendor)
- [How can an MSP show clients which AI tools their staff use?](https://netsenx.com/en/faq/how-can-an-msp-show-clients-which-ai-tools-their-staff-use)
- [Can an MSP offer OT monitoring to small manufacturers?](https://netsenx.com/en/faq/can-an-msp-offer-ot-monitoring-to-small-manufacturers)