NIS2 requires organizations to identify, assess, and manage cybersecurity risks arising from their suppliers and service providers.
This includes:
- Evaluating vendor security practices
- Defining security requirements in contracts
- Monitoring supplier compliance