Proving control of your suppliers
Counted on real questionnaires, quoted from the official text. No questionnaire is reproduced.
Across fifteen real questionnaires we went through, 6 ask you about this point, in 20 questions. These are not invented forms: they are the ones European organisations receive today.
The law itself is shorter than people think. The NIS2 directive, at article 21, paragraph 2, point d), lists this among the measures every entity in scope must take. Here is exactly what it says:
supply chain security, including security-related aspects concerning the relationships between each entity and its direct suppliers or service providers
Nothing more. The gap between that sentence and the questions you are asked is the real subject: part of what is demanded of you does not come from the law, it comes from the contract. Knowing which is which changes your position in the negotiation.
What it costs not to answer
You drop off the supplier list. A supplier questionnaire is not paperwork, it is the condition of entry. No answer, no contract.
Your insurance can be void. Article L113-8 of the French Insurance Code provides for the nullity of the contract in case of an intentional false declaration, and states that premiums already paid remain acquired by the insurer. Years of premiums, nothing on the day of the claim, and no refund.
An inaccurate declaration becomes a breach in itself. Article 32(7)(a)(v) of the directive lists declaring false or grossly inaccurate information about your risk management measures among serious breaches, in any event: no incident, no damage required.
One honest caveat, and it is the one that matters: article L113-8 targets the intentional declaration. A good faith mistake voids nothing. So the point is not fear of the penalty: whoever ticks « yes » without ever checking takes a risk they cannot measure; whoever ticks « yes » with a dated verification behind them is demonstrably in good faith. What is sold here is not protection against a penalty, it is proof of good faith.
Buy peace of mind, fast and properly
What we offer fits in one sentence: buy peace of mind, fast and properly.
Peace of mind: no longer fearing your own answer. You tick because you checked, not because the box had to be ticked.
Fast: the price is published while the whole market answers with a quote, and the result reaches you in hours, not weeks.
Properly: the answer is dated, sourced and defensible towards whoever is asking. And we keep none of your data: we measure at your end, you keep everything.
A Microsoft 365 audit today provides measured evidence on 2 of these questions, and the required data exists for 4 more.
Le diagnostic qui date et source votre réponse coûte 499 € HT, prix affiché, sans devis et sans rendez-vous préalable.
Les chiffres de cette page sont comptés sur des formulaires réels. Les citations sont reprises du texte officiel de l'Union européenne, librement réutilisable. Aucun questionnaire d'assureur ou de donneur d'ordre n'est reproduit ici : leurs libellés appartiennent à leurs auteurs.