The irreplaceable supplier: the new cyber risk companies are overlooking

Article by Giovanna Boschetti and Lorenzo Aldera.

With the NIS2 Decree, cyber risk no longer concerns only internal systems, but also “irreplaceable” suppliers.
The new ACN Determinations introduce the concept of a “NIS-relevant supplier”, shifting the focus towards supply chain resilience and the organisation’s critical dependencies.
Supplier management is therefore moving beyond the purely contractual sphere and becoming an integral part of cyber risk governance, at the intersection of business continuity, compliance and operational security.

The full article is available on Agenda Digitale.