NIS2 Article 21(2)(d) asks you to look after the security of your supply chain. Supplier checks sends your suppliers a short security questionnaire and gives you a score for each answer set.
The questionnaire
- 31 built-in questions cover the NIS2 measures 21(2)(a) to (j). Each has a weight from 1 to 3.
- Yes gives full points, Partly half, No none. Not applicable is left out of the score.
- The score runs from 0 to 100%.
- Under Your own questions you can add up to 50 questions with a weight from 1 to 3. Untick Asked to switch one off.
Settings
Click Settings to set:
- The minimum score per supplier criticality. Defaults: critical 80%, high 70%, medium 50%, low 30%.
- How many days links work (7 to 90, default 30). A link always works until at least a day after the due date.
How to send a check
- Open Supplier checks in the menu and click New check.
- Pick active suppliers. The check goes to the Contact email saved on the supplier; suppliers without an email or offboarded are left out.
- Choose the language of the questionnaire (English, Spanish or German) and, if you like, a due date under Answer by.
- Several suppliers become a campaign. Give it a name, or it is named after today's date.
- Tick Send the emails now, or leave it off to keep the checks as drafts.
The email carries your branding when your package includes branding. Suppliers get one reminder: 3 days before the due date, or 7 days after sending when there is no due date. The Campaigns panel counts sent, answered, approved and rejected checks.
How to decide
When a supplier sends answers, owners and admins are notified. Open the check to see the score next to your minimum and every answer with its comment. Then:
- Approve or Reject with a note. Your name and the time are recorded. Approving sets the supplier's last security check to today and the next one to 12 months later.
- Ask for clarification: write notes next to answers. The supplier gets a new link and sends again.
Send the link again creates a new link; the old one stops working. The supplier never sees your decision.
Package limits
Checks per calendar year: Professional 25, Business 250, Enterprise unlimited. Free and Supplier do not include checks.