Good news: Fendix is now allowed to perform NIS2 Supply Chain audits!

What does that mean?

Our consultants are trained, tested and qualified to conduct these audits. So do you want to get started with the NIS2 Supply Chain certificate and do you need a party that knows what it is doing so that you can achieve the label without worries? Then Fendix is the right place for you.

What is the NIS2 Supply Chain Certificate again?

It NIS2 Supply Chain Certificate is a label that allows suppliers of NIS2-organizations demonstrate that they have their cybersecurity in order. This is because NIS2 organizations are responsible for digital security throughout the chain and therefore want to be able to demonstrate that their suppliers have their act together.

The label has three levels:

‍

✅ SC10 — Basic Measures: Think of MFA, incident management, clear policy and a bit of awareness.

✅ SC20 — Comprehensive Security: Think of encryption, audits, stricter access controls and monitoring.

✅ SC30 — Advanced Cybersecurity: Examples include the management of OT systems and stricter cloud service control.

For whom is this relevant?

Are you an SME who provides services to a NIS2 organization? Then SC10 is often enough. Do you provide ICT or OT services and is your impact on your customer somewhat greater? Then SC20 is usually the default. Does your organization fall directly under the NIS2 legislation and are you subject to registration? Dan is SC30 minimally required. In addition, additional certification, such as ISO 27001 whether NEN 7510, highly recommended.

‍

Whatever your situation, we'll help you get a clear picture of what you need and see if you're ready.

Why Fendix?

We make organizations resilient with information security and privacy. With our fresh, no-nonsense approach, we not only help companies achieve certifications, but also strengthen their processes and awareness.

While you focus on your core activities, we make sure that information security and privacy are no longer a concern. With a pragmatic, flexible and innovative approach and a focus on sustainable collaborations, we invest in your organization and the future.

💼 What we do

• Implementation: mentoring and unburdening with certifications such as ISO 27001, NEN 7510, SOC2 and NIS2
• Security Awareness: interactive training courses, gamified learning via Guardey, and phishing simulations to increase awareness within your team
• Specialism as a Service: use of certified Privacy Officers, Security Officers and Data Protection Officers on a flexible basis
• Maintenance & improvement: continuity in information security through regular audits, risk analyses and complete maintenance packages so that you stay up to the standard

We are very happy to contribute to the NIS2 Supply Chain certificate. The more organizations comply with the relevant label, the stronger the chain becomes. And that's what we do it for!

Want to know more?

Do you want to know what level of the NIS2 Supply Chain certificate suits your organization? Or are you curious about how an audit works? Contact us and we'll see what's smart together.

‍