NIS2 PROTEGE — Supply Chain Management and Exit Plans

Course overview

Training for people who manage the supply chain from both sides: assessing and controlling their own organisation’s critical suppliers, and answering customer questionnaires and evidence requests. It covers due diligence, criticality, concentration and substitutability, contractual requirements, monitoring, residual risk and, when needed, restriction, transition and safe exit — always separating legal obligation, contractual requirement and customer request. It follows Portugal’s Cybersecurity Legal Framework, Regulation 756/2026 and QNRCS 2.0, using the NIS2 Essential Toolkit — Supply Chain and, where useful, Cybersecure.

What you will learn

• Identify and categorise critical suppliers, services and dependencies.
• Carry out proportionate due diligence before contracting, renewing or expanding a relationship.
• Assess concentration, substitutability and technology lock-in.
• Set proportionate, verifiable contractual requirements and track compliance.
• Answer customer questionnaires, separating legal obligation, contractual requirement and information request.
• Justify remediation, restriction, replacement or exit decisions and prepare a safe termination.

Programme

1. Session 1Assess before you contract
2. Session 2Contract, coordinate and monitor
3. Session 3Test, exit and close safely