admin October 8, 2026 0 Comments

A supplier risk assessment should not end when a questionnaire is returned and filed away. That approach creates a false sense of control. The real work begins after onboarding, when the organisation must keep checking whether the

admin October 6, 2026 0 Comments

Third-party risk management is no longer a procurement-only activity. It is now a core cybersecurity and governance discipline, especially for organisations that need to work across ISO 27001 and NIS2 without creating two separate supplier processes. The

admin October 2, 2026 0 Comments

A European manufacturer already runs an ISO/IEC 27001 information security management system. Then NIS2 enters the picture. The ISO 27001 and NIS2 work begins to split into new spreadsheets, new risk registers, new policies, new supplier questionnaires