From QM to SC: the new levels of NIS2 Supply Chain
The NIS2 Quality Mark had three levels:
- QM10
- QM20
- QM30
That structure will remain in place, but will be called NIS2 Supply Chain:
- SC10
- SC20
- SC30
The structure and distinction between the levels remain unchanged. It is still a matter of demonstrability, appropriate to the role your organization plays in the chain. You can read about what these levels entail here.
Why NIS2 Supply Chain?
The new name makes it clearer what the certificate is intended for. NIS2 is not just about individual organizations, but rather about the dependencies between companies. Suppliers, IT partners, and service providers are increasingly being asked questions about their security levels.
With the NIS2 Supply Chain certificate, you can demonstrate that you take NIS2 seriously and that you understand and fulfill your responsibilities in the chain.
Who is the NIS2 Supply Chain certificate intended for?
The certificate is suitable for companies and organizations of all sizes. Whether you fall directly under NIS2 or are a supplier to an organization that does, demonstrable cybersecurity is increasingly expected. This certificate helps to make that conversation concrete, whether with customers, chain partners, or other stakeholders.
How Fendix can help with NIS2 SC
Organizations can simply continue working toward achieving the appropriate SC level. We provide substantive guidance and ensure that your setup is demonstrably correct.
The name is new. The content is familiar. And the need to have a firm grasp on your role in the chain remains as important as ever. Want to know more about NIS2 SC? Contact us below for a no-obligation, free consultation.
