Your client falls under NIS2. Now they need proof from you.
Organisations under NIS2 and the Dutch Cyberbeveiligingswet (Cbw) must manage the security of their suppliers. That reaches you as questionnaires, contract clauses and requests for evidence. Block The Chain helps you answer them with evidence, not promises.
This page explains the technical side. It is not legal advice.
Three requests. All of them want proof.
Security questions
Often long, sometimes one per client. Every answer has to match what actually runs.
Security clauses
Obligations on security, on reporting incidents to your client, and a right to check.
Proof that controls work
Who has access, how you patch, how you restore, how you detect and report.
One evidence file. Every questionnaire after it gets easier.
Evidence file
Your controls, each with dated proof, mapped to what your clients ask. You reuse it for every request.
Access ledger
Every account and vendor path with an owner and a decision. The question clients ask most.
Readiness read-out
What is ready, what is missing, ranked by what your clients check first. Then a retest.
The work is Operation 01, Security Audit and Evidence File, with the access part of Operation 03, Identity and Access Ledger.
Why this lands on your desk. In four lines.
- The rule. NIS2, EU Directive 2022/2555, makes essential and important entities manage their cybersecurity risk. Supply-chain security is part of that duty (Article 21).
- Your part. They have to weigh the weak spots of each direct supplier and the quality of its security practices. That is why the questions come to you.
- The Netherlands. The directive is implemented in the Cyberbeveiligingswet (Cbw). Whether your own organisation is in scope depends on sector and size. Your client's requirements can reach you either way.
- The line we keep. Scope, liability and contract wording are questions for your lawyer. We verify and document the technical side.
One email starts it.
Thirty minutes to scope it. A fixed-price proposal within two business days.
admin@blockthechain.nl