NIS2 readiness for manufacturing and industrial suppliers

The five questions this sector gets

Each with what counts as evidence. A yes without an artefact scores nothing.

1. Remote access to customer sitesWho at your company can reach a customer network or machine remotely, through what tool, with what authentication, and how access is removed when a technician leaves.
2. Laptops and USB media on siteEncrypted devices, up-to-date patching, antivirus, and a rule for removable media. Customers increasingly ask for a written policy and a sample device report.
3. Drawings, specifications and customer dataWhere files live, who can open them, backups with a tested restore, and what happens to a customer's data when the contract ends.
4. Email authenticationSPF, DKIM and DMARC, because invoice fraud against suppliers is the most common incident customers in this sector report.
5. Incident contact and timingA named person, a monitored address, and how fast you will tell the customer if you are hit, because their own 24-hour early-warning clock may depend on it.

NIS2 supplier-readiness assessment

10 working days, fixed scope, written deliverables.

External reconnaissance, authenticated configuration review, email and domain authentication, cloud and hosting posture, and a staff phishing baseline. You receive a written report, a remediation plan ordered by risk, and an evidence pack mapped to the NIS2 themes your customer is asking about.

• External attack-surface report
• Email authentication
• Server and cloud hardening
• Web security headers
• Remediation plan