{"id":35083,"date":"2026-05-22T14:23:11","date_gmt":"2026-05-22T12:23:11","guid":{"rendered":"https:\/\/www.pkf-attest.es\/noticias\/nis2-y-cadena-de-suministro-2\/"},"modified":"2026-07-01T13:42:12","modified_gmt":"2026-07-01T11:42:12","slug":"nis2-y-cadena-de-suministro-2","status":"publish","type":"noticias","link":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/","title":{"rendered":"NIS2 and the Supply Chain: Why Your Client Will Ask for ISO 27001"},"content":{"rendered":"\n
<\/p>\n\n\n\n
Cybersecurity<\/strong> has become a business requirement. With the arrival of NIS2<\/strong>, internal compliance is no longer enough: companies must ensure the security of their entire supply chain. This is shifting the burden directly to the B2B environment, where an increasing number of customers are requesting formal guarantees before signing a contract.<\/h3>\n\n\n\n
<\/div>\n\n\n\n
From regulatory requirement to customer expectation<\/strong><\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n
<\/p>\n\n\n\n
The NIS2 Directive represents a significant shift in the European cybersecurity model: risk management is no longer limited to internal systems but explicitly extends to suppliers and third parties.<\/p>\n\n\n\n
Specifically, organizations subject to NIS2 must:<\/p>\n\n\n\n
\n
Identify and assess risks associated with the supply chain<\/li>\n\n\n\n
Require safety guarantees from suppliers<\/li>\n\n\n\n
Include specific contractual requirements<\/li>\n\n\n\n
This change has a direct impact on the market: even companies not covered by NIS2 are facing security requirements because they are part of the value chain.<\/p>\n\n\n\n
Cybersecurity is thus evolving from a regulatory requirement into a criterion for business access.<\/p>\n\n\n\n
<\/div>\n\n\n\n
\n
\n
\n
\n
ISO 27001: The Standard That Drives Business Forward<\/strong><\/strong><\/strong><\/h2>\n\n\n\n
<\/p>\n\n\n\n
In this context, ISO 27001 has established itself as the most widely used framework for demonstrating security maturity. Its value is not merely technical, as it streamlines certification and audit processes, shortens contract lead times, and builds immediate trust with customers. Without this type of validation, many companies face increasing barriers to accessing certain projects or sectors.<\/p>\n\n\n\n
The urgency is commercial<\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n
Although regulatory deadlines depend on national implementation, the impact on the market is already visible:<\/p>\n\n\n\n
The requirements are coming in before the regulatory deadlines:<\/p>\n\n\n\n
\n
Security questionnaires for commercial phases<\/li>\n\n\n\n
Contractual clauses with explicit requirements<\/li>\n\n\n\n
More frequent supplier audits<\/li>\n\n\n\n
Repeated request for evidence<\/li>\n<\/ul>\n\n\n\n
The difference is no longer about getting the job done, but about getting it done on time.<\/p>\n\n\n\n
<\/div>\n\n\n\n
<\/div><\/div>\n\n\n\n
\n
\n<\/figure>\n<\/div><\/div>\n\n\n\n
\n
Real change: leadership accountability<\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n
NIS2 introduces a key new feature: senior management\u2019s responsibility for cybersecurity.<\/p>\n\n\n\n
This means that supplier risks are no longer classified as operational risks but are now considered business and legal liability risks<\/p>\n\n\n\n
As a result, supplier management is no longer merely an administrative process, but a key element of corporate governance.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
<\/div>\n\n\n\n
Operational impact: projects, audits, and reporting<\/strong><\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n
This change directly affects execution:<\/p>\n\n\n\n
\n
Projects that must demonstrate security controls<\/li>\n\n\n\n
More stringent certification processes<\/li>\n\n\n\n
Greater need for documentation and evidence<\/li>\n\n\n\n
Regular security reports<\/li>\n<\/ul>\n\n\n\n
In addition, the demand for traceability is growing: it is not enough to simply have controls in place; you must demonstrate that they work.<\/p>\n\n\n\n
<\/div>\n\n\n\n
How to address this without disrupting business operations<\/strong><\/strong><\/strong><\/strong><\/strong><\/strong><\/strong><\/h2>\n\n\n\n
<\/div>\n\n\n\n
The key lies not in implementing isolated controls, but in structuring cybersecurity as part of the operational model. This involves prioritizing an approach based on actual business risks, integrating security into existing processes, and defining clear responsibilities that enable traceable decision-making. At the same time, it is essential to gather evidence from the early stages, thereby avoiding reactive responses during audits or procurement processes. Organizations that approach this change in an orderly manner not only meet requirements but also reduce commercial friction and gain agility in increasingly demanding environments.<\/p>\n\n\n\n
The combination of NIS2 and the supply chain<\/strong> is redefining business access in B2B environments.<\/p>\n\n\n\n
Cybersecurity is no longer just a technical requirement; it has become a verifiable business attribute<\/strong>. ISO 27001<\/strong> has become a business enabler. It is not just a matter of compliance, but of competitiveness.<\/p>\n","protected":false},"featured_media":34207,"template":"noticias-corporativa-single-post.php","categories":[],"tags":[212,221],"novedades_corporativa":[],"class_list":["post-35083","noticias","type-noticias","status-publish","has-post-thumbnail","tag-news","tag-regulatory-impact","entry"],"acf":[],"yoast_head":"\nNIS2 and the supply chain<\/title>\n<meta name=\"description\" content=\"With NIS2, cybersecurity risk management extends to the entire supply chain. We explain why your customers will require ISO 27001.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 and the Supply Chain: Why Your Client Will Ask for ISO 27001\" \/>\n<meta property=\"og:description\" content=\"With NIS2, cybersecurity risk management extends to the entire supply chain. We explain why your customers will require ISO 27001.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/\" \/>\n<meta property=\"og:site_name\" content=\"PKF Attest\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-01T11:42:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1025\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/\",\"name\":\"NIS2 and the supply chain\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg\",\"datePublished\":\"2026-05-22T12:23:11+00:00\",\"dateModified\":\"2026-07-01T11:42:12+00:00\",\"description\":\"With NIS2, cybersecurity risk management extends to the entire supply chain. We explain why your customers will require ISO 27001.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg\",\"width\":2560,\"height\":1025,\"caption\":\"ISO 27001. International information security standard. Concept of ISO standards quality control warranty.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/nis2-y-cadena-de-suministro-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIS2 and the Supply Chain: Why Your Client Will Ask for ISO 27001\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"name\":\"PKF Attest\",\"description\":\"PKF Attest\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\",\"name\":\"PKF-Attest\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"width\":675,\"height\":675,\"caption\":\"PKF-Attest\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1078028\\\/admin\\\/dashboard\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"NIS2 and the supply chain","description":"With NIS2, cybersecurity risk management extends to the entire supply chain. We explain why your customers will require ISO 27001.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/","og_locale":"en_US","og_type":"article","og_title":"NIS2 and the Supply Chain: Why Your Client Will Ask for ISO 27001","og_description":"With NIS2, cybersecurity risk management extends to the entire supply chain. We explain why your customers will require ISO 27001.","og_url":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/","og_site_name":"PKF Attest","article_modified_time":"2026-07-01T11:42:12+00:00","og_image":[{"width":2560,"height":1025,"url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/","url":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/","name":"NIS2 and the supply chain","isPartOf":{"@id":"https:\/\/www.pkf-attest.es\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/#primaryimage"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg","datePublished":"2026-05-22T12:23:11+00:00","dateModified":"2026-07-01T11:42:12+00:00","description":"With NIS2, cybersecurity risk management extends to the entire supply chain. We explain why your customers will require ISO 27001.","breadcrumb":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/#primaryimage","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/iso-27001-international-information-security-standard-concept-iso-standards-quality-control-warranty-scaled.jpg","width":2560,"height":1025,"caption":"ISO 27001. International information security standard. Concept of ISO standards quality control warranty."},{"@type":"BreadcrumbList","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/nis2-y-cadena-de-suministro-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pkf-attest.es\/en\/"},{"@type":"ListItem","position":2,"name":"NIS2 and the Supply Chain: Why Your Client Will Ask for ISO 27001"}]},{"@type":"WebSite","@id":"https:\/\/www.pkf-attest.es\/en\/#website","url":"https:\/\/www.pkf-attest.es\/en\/","name":"PKF Attest","description":"PKF Attest","publisher":{"@id":"https:\/\/www.pkf-attest.es\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pkf-attest.es\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pkf-attest.es\/en\/#organization","name":"PKF-Attest","url":"https:\/\/www.pkf-attest.es\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","width":675,"height":675,"caption":"PKF-Attest"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/1078028\/admin\/dashboard\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias\/35083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias"}],"about":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/types\/noticias"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media\/34207"}],"wp:attachment":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media?parent=35083"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/categories?post=35083"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/tags?post=35083"},{"taxonomy":"novedades_corporativa","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/novedades_corporativa?post=35083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"\"](\"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/122291.jpg\")
<\/figure>\n<\/div><\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\n\n\n\n<\/div>\n\n\n\n![\"\"](\"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2026\/05\/29603.jpg\")
<\/figure>\n<\/div><\/div>\n\n\n\n\n