What security questions will big customers ask a small supplier?

Expect questions about access control, updates, backups, incident handling and evidence, especially from customers that fall under NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies., which asks them to manage security in their supply chain. Typical questions: do you use multi-factor authentication, how quickly do you apply updates, do you test backups, who handles incidents and how fast will you tell us, do you monitor your network, where is our data stored, and can you show evidence. Answer truthfully: a clear no with a plan is better than a yes you cannot prove. Keep a short security description and the evidence behind it ready. NetSenX can supply part of that evidence: detection records, the audit log and, from the Starter plan, PDF reports.

← All 40 questions on Small business monitoringAll topics