FreeFor suppliers to NIS2 companies
Answer the NIS2 supplier questions once. Share one link.
Your NIS2 customers must check the security of each direct supplier, so their questionnaires come to you. Answer 40 plain questions once, each tied to the NIS2 measure it comes from, and send the same link to every customer who asks.
- Free, no card
- A PDF for your customer's file
- 40 questions in plain words
How it works
One profile, every customer
The questions customers send repeat themselves. Answer them here, and point every new form to the same page.
- 1
Answer once
40 questions in plain words, grouped by the ten measures of NIS2 Article 21(2). Each one says what it means and where it comes from.
- 2
Share one link
Send it from your own email, one link per customer, and see which customers opened it. A PDF goes with it for their file.
- 3
Keep it current
Change an answer when something changes. The page shows the date you last reviewed it, so a customer knows how fresh it is.
What the questions cover
The ten measures NIS2 sets for your customer
Article 21(2) lists them; point (d) and Article 21(3) have your customer weigh its suppliers' security. Supplier questionnaires mirror the list, so the profile does too.
- 21(2)(a)
Risk analysis and security policy
4 questions
- 21(2)(b)
Incident handling
4 questions
- 21(2)(c)
Backups and business continuity
4 questions
- 21(2)(d)
Supply chain
4 questions
- 21(2)(e)
Secure systems and vulnerability handling
5 questions
- 21(2)(f)
Checking that the measures work
3 questions
- 21(2)(g)
Cyber hygiene and training
3 questions
- 21(2)(h)
Cryptography and encryption
4 questions
- 21(2)(i)
People, access and assets
5 questions
- 21(2)(j)
MFA and secured communications
4 questions
Free and the subscription
Free for the answers. The subscription for the work behind them.
Upgrade only when customers want proof, documents or a certificate.
| What is included | Freesupplier profile | Subscriptionevery framework |
|---|---|---|
| Your profile with every answer | ||
| Share link, a link per customer, opens per link | ||
| PDF for your customer's file | ||
| Answers read from your systems each morning | ||
| Policies drafted for you to approve | ||
| Customers' own forms drafted from your records | ||
| Documents behind an NDA in your trust center | ||
| ISO 27001, NIS2, CRA, DORA, GDPR and every other framework | ||
| Price | €0 | €249 a month, 7 days free |
Questions
What suppliers ask first
Short answers, with the article where one applies.
Does a profile make us NIS2 compliant?
No. It records your answers to the questions your customers ask. Whether NIS2 applies to you depends on your own sector and size.
Does StandardOS check our answers?
No. The page says the answers are yours and not audited. With the subscription, answers your systems can show, such as MFA, are read from them each morning and marked.
Will a customer accept a link instead of its own form?
That is your customer's choice. The profile covers the measures NIS2 points them to; if they still send their own form, the subscription drafts it from your records.
Who can see our answers?
Anyone you give the link to. Search engines do not see it unless you turn that on, and you can unpublish at any time.
Our customer wants incidents within 24 hours. Is that NIS2?
The 24-hour early warning is your customer's duty to its authority. Its contract with you can pass a shorter clock on, so it can meet its own.
Answer the next questionnaire with a link.
Free, no card. Nothing is public until you publish.