Executive self-assessment

NIS2 Supplier Readiness Assessment

Check whether your organization can meet NIS2-style cyber risk and supply-chain expectations from customers or through direct applicability.

Start assessment All tools
Result logic

What this tool evaluates

Evaluates governance, risk, incident, supply chain, vulnerability, continuity, identity, encryption, and evidence.

Governance 20%
Incident handling 20%
Supply-chain security 22%
Technical hygiene 23%
Continuity & resilience 15%
0 / 10
0%
01 Are management responsibilities for cybersecurity risk formally assigned and reviewed?
02 Is there a documented, current cyber risk assessment connected to treatment decisions?
03 Can significant security incidents be detected, classified, escalated, and managed against defined timelines?
04 Has incident response been exercised with leadership and key business dependencies?
05 Are critical suppliers identified, risk-tiered, and reviewed before and during the relationship?
06 Do supplier contracts include proportionate security, incident, continuity, and subcontractor expectations?
07 Are vulnerability and patch processes risk-based, measured, and evidenced?
08 Are MFA, privileged access, access review, and least-privilege controls consistently applied?
09 Is encryption used appropriately for sensitive data and are key-management responsibilities clear?
10 Are continuity, backup, recovery, and crisis plans tested against realistic scenarios?