{"id":28300,"date":"2026-02-01T12:08:06","date_gmt":"2026-02-01T11:08:06","guid":{"rendered":"https:\/\/sunbytes.io\/wp\/nis2-article-21-supply-chain-security\/"},"modified":"2026-09-15T09:08:07","modified_gmt":"2026-09-15T09:08:07","slug":"nis2-article-21-supply-chain-security","status":"publish","type":"post","link":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/","title":{"rendered":"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB"},"content":{"rendered":"\n<p class=\"eplus-wrapper wp-block-paragraph\">Veel gesprekken over NIS2 beginnen bij beleid.<br>Maar veel echte incidenten beginnen ergens anders:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Een leveranciersaccount dat nooit correct is afgesloten<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Een SaaS-tool waarin \u201ciedereen admin is\u201d<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Een managed service provider met te veel toegang, te lang<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Daarom behandelt NIS2 ketenrisico niet als een \u201coptionele extra\u201d. Het plaatst dit expliciet binnen de risicobeheersmaatregelen van <strong>Artikel 21<\/strong> \u2014 inclusief de beveiligingsaspecten van je relaties met <strong>directe leveranciers of dienstverleners<\/strong>.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Dit artikel is bewust praktisch opgezet. Geen juridische diepduiken, geen \u201cdownload dit template\u201d. Wel: een heldere aanpak die EU-MKB\u2019s kunnen gebruiken om vertrouwen op te bouwen en verdedigbaar te blijven wanneer klanten (en toezichthouders) vragen: Hoe beheersen jullie leveranciersrisico?<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Weet je nog niet zeker of NIS2 op jouw organisatie van toepassing is? Begin hier:<strong> <\/strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/is-nis2-op-ons-van-toepassing\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Check of NIS2 van toepassing is op jouw organisatie<\/strong>.<\/a><\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">TL;DR<\/h2>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">NIS2 verwacht dat je leveranciersrisico meeneemt in je cybersecurity-risicomanagement<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Begin bij <strong>directe leveranciers\/dienstverleners<\/strong> \u2014 probeer niet meteen alles te omvatten<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Het doel is niet \u201cperfecte leveranciers\u201d, maar <strong>herhaalbare checks + duidelijke besluiten + bewijs<\/strong><\/li>\n\n\n\n<li class=\" eplus-wrapper\">Als vragenlijsten van afnemers deals al vertragen, bouw dan een responsesysteem: <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/vendor-security-questionnaires\/\" target=\"_blank\" rel=\"noreferrer noopener\">Vendor security questionnaires: hoe mkb\u2019s sneller reageren<\/a><\/strong><\/li>\n\n\n\n<li class=\" eplus-wrapper\">Voor het complete NIS2-overzicht en prioriteiten: <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/nis2-compliance-readiness-checklist-voor-eu-mkb\/\" target=\"_blank\" rel=\"noreferrer noopener\">NIS2 readiness checklist voor EU-MKB\u2019s<\/a><\/strong><\/li>\n<\/ul>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><\/li>\n<\/ul>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Wat NIS2 daadwerkelijk van je vraagt<\/h2>\n\n\n\n<figure class=\" wp-block-image aligncenter size-full eplus-wrapper\"><img decoding=\"async\" width=\"1000\" height=\"533\" src=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security.webp\" alt=\"NIS2 Article 21 Supply Chain Security\" class=\"wp-image-28313\" srcset=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security.webp 1000w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-300x160.webp 300w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-768x409.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Artikel 21 neemt supply chain security expliciet op in de minimale set risicobeheersmaatregelen en noemt daarbij nadrukkelijk de relatie met je <strong>directe leveranciers of dienstverleners<\/strong>.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">In normaal Nederlands betekent dat:<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Je moet kunnen aantonen dat je weet <strong>welke leveranciers ertoe doen<\/strong>, dat je ze <strong>op een redelijke manier beoordeelt<\/strong>, en dat je je risico niet simpelweg \u201cuitbesteedt\u201d omdat een ander een deel van je stack beheert.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Ook belangrijk: de richtlijn stuurt erop aan om <strong>cybersecuritymaatregelen op te nemen in contractuele afspraken<\/strong> met directe leveranciers en dienstverleners (opnieuw: eerst direct).<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Dit is een <strong>vertrouwensmechanisme<\/strong>, geen papieren exercitie.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">\u201cDirecte leveranciers\u201d \u2014 een scope die je team niet verplettert<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Hier gaat het vaak mis. MKB\u2019s lezen \u201csupply chain security\u201d en zien meteen een eindeloze audit van elke leverancier waar ooit een factuur van is betaald.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Dat is niet de bedoeling. NIS2 richt zich in eerste instantie op <strong>directe leveranciers\/dienstverleners<\/strong> \u2014 partijen waar je op leunt om je dienstverlening te leveren of je operatie draaiende te houden.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Een eenvoudige manier om \u201cdirect\u201d in jouw context te defini\u00ebren:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">leveranciers die <strong>toegang hebben tot je data<\/strong>, of<\/li>\n\n\n\n<li class=\" eplus-wrapper\">leveranciers die <strong>toegang hebben tot je systemen<\/strong>, of<\/li>\n\n\n\n<li class=\" eplus-wrapper\">leveranciers die <strong>je dienstverlening kunnen verstoren<\/strong> als zij uitvallen<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Voldoet een leverancier aan geen van deze criteria? Dan is dat meestal niet waar je begint.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\"><strong>The \u201cMinimum Viable Supplier Risk\u201d routine (SME-friendly, defensible)<\/strong><\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Je hebt geen zwaar third-party riskprogramma nodig om serieus genomen te worden. Je hebt iets nodig dat <strong>herhaalbaar<\/strong> is.<\/p>\n\n\n\n<figure class=\" wp-block-image aligncenter size-full eplus-wrapper\"><img decoding=\"async\" width=\"1000\" height=\"667\" src=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/Minimum-Viable-Supplier-Risk.webp\" alt=\"\" class=\"wp-image-28311\" srcset=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/Minimum-Viable-Supplier-Risk.webp 1000w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/Minimum-Viable-Supplier-Risk-300x200.webp 300w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/Minimum-Viable-Supplier-Risk-768x512.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Stap A \u2014 Maak een korte lijst met \u201ckritieke leveranciers\u201d<\/h3>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Richtlijn: <strong>maximaal 10\u201320<\/strong> om mee te starten:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">cloud hosting \/ infrastructuur<\/li>\n\n\n\n<li class=\" eplus-wrapper\">identity provider \/ SSO<\/li>\n\n\n\n<li class=\" eplus-wrapper\">managed IT \/ MSP \/ MSSP<\/li>\n\n\n\n<li class=\" eplus-wrapper\">kern-SaaS waarin klantdata staat<\/li>\n\n\n\n<li class=\" eplus-wrapper\">cruciale code-afhankelijkheden (als je software levert)<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Stap B \u2014 Classificeer leveranciers op toegang en impact (2-minutenscore)<\/h3>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Stel twee vragen:<\/p>\n\n\n\n<ol class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Als deze leverancier wordt gecompromitteerd, kan dat de <strong>vertrouwelijkheid, integriteit of beschikbaarheid<\/strong> van onze dienst be\u00efnvloeden?<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Hoeveel toegang hebben zij (data \/ systeem \/ admin)?<\/li>\n<\/ol>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Deel ze vervolgens in drie categorie\u00ebn:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><strong>Kritiek<\/strong> (hoge toegang + hoge impact)<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Belangrijk<\/strong><\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong>Laag risico<\/strong>Stap D \u2014 Beslis, leg vast en herzie<\/li>\n<\/ul>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Stap C \u2014 Doe \u201cpassende checks\u201d per categorie<\/h3>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Voor <strong>kritieke leveranciers<\/strong> wil je een beknopt maar stevig setje signalen:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">hebben ze beveiligingscontacten en een incidentproces?<\/li>\n\n\n\n<li class=\" eplus-wrapper\">MFA\/SSO-ondersteuning en toegangsbeheer<\/li>\n\n\n\n<li class=\" eplus-wrapper\">back-up \/ BCP-aanpak waar relevant<\/li>\n\n\n\n<li class=\" eplus-wrapper\">kwetsbaarheden- en patchbeleid<\/li>\n\n\n\n<li class=\" eplus-wrapper\">bewijs of geloofwaardige attestaties waar mogelijk (niet altijd een certificaat)<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Voor <strong>belangrijke leveranciers<\/strong>: minder checks. Voor <strong>laag risico<\/strong>: documenteer waarom ze laag risico zijn \u2014 en ga verder.<\/p>\n\n\n\n<h3 class=\" wp-block-heading eplus-wrapper\">Stap D \u2014 Beslis, leg vast en herzie<\/h3>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">De kracht zit niet in de checklist, maar in het <strong>besluitvormingsspoor<\/strong>:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">wat je hebt gecontroleerd<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat je hebt geaccepteerd<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat je hebt gemitigeerd<\/li>\n\n\n\n<li class=\" eplus-wrapper\">wat je opnieuw beoordeelt (bijv. jaarlijks of bij wijzigingen)<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Dat <strong>bewijs\u00adspoor<\/strong> is wat je later geloofwaardig maakt.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Contracten: houd het simpel, houd het echt<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">NIS2 benadrukt het belang van het vastleggen van cybersecurity-verwachtingen in contracten met directe leveranciers en dienstverleners.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Voor MKB\u2019s hoef je geen 20 pagina\u2019s aan clausules toe te voegen. Begin voor <strong>kritieke leveranciers<\/strong> met vier praktische afspraken:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">meldplicht bij beveiligingsincidenten (termijnen + contactpunten)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">toegangsbeheer (least privilege, MFA waar haalbaar)<\/li>\n\n\n\n<li class=\" eplus-wrapper\">transparantie over subverwerkers\/subcontractors bij gevoelige datastromen<\/li>\n\n\n\n<li class=\" eplus-wrapper\">recht op bewijs (niet \u201calles mogen auditen\u201d, maar redelijk aantoonbaar)<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Helderheid en consistentie wekken vertrouwen \u2014 ook als je geen enterprise-gigant bent.<\/p>\n\n\n\n<figure class=\" wp-block-image aligncenter size-full eplus-wrapper\"><img decoding=\"async\" width=\"1000\" height=\"667\" src=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/security-contract.webp\" alt=\"\" class=\"wp-image-28309\" srcset=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/security-contract.webp 1000w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/security-contract-300x200.webp 300w, https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/security-contract-768x512.webp 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Waar dit \u00e9cht speelt: afnemersvragen en dealfrictie<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Zelfs als NIS2 niet rechtstreeks op jou van toepassing is, raakt het je vaak <strong>via je klanten<\/strong>.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Wanneer gereguleerde afnemers hun leveranciers scherper toetsen, merk je dat als:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">security questionnaires<\/li>\n\n\n\n<li class=\" eplus-wrapper\">verzoeken om bewijs<\/li>\n\n\n\n<li class=\" eplus-wrapper\">vervolgvragen als: \u201ckun je dit aantonen?\u201d<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Precies daarom adviseren we een <strong>herhaalbaar responsesysteem<\/strong> zoals een <strong><a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/vendor-security-questionnaires\/\" target=\"_blank\" rel=\"noreferrer noopener\">Answer Pack<\/a><\/strong>: \u00e9\u00e9n interne bron met standaardantwoorden + bewijs + veilige uitzonderingsformuleringen.<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Als je deze verzoeken al krijgt, is dit een van de <strong>snelste vertrouwenswinsten<\/strong> die je kunt boeken \u2014 zonder nieuwe tooling.<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Veelgemaakte fouten (en de betere aanpak)<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Fout 1: Elke leverancier proberen te beoordelen<\/strong><br>\u2192 <strong>Beter:<\/strong> Begin bij direct + kritisch<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Fout 2: \u201cWe zijn compliant\u201d zeggen zonder bewijs<\/strong><br>\u2192 <strong>Beter:<\/strong> Toon bewijs en wees eerlijk over gaps, m\u00e9t plan<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Fout 3: Leverancierschecks als een eenmalige actie zien<\/strong><br>\u2192 <strong>Beter:<\/strong> Maak het herhaalbaar (jaarlijks + bij wijzigingen)<\/p>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong>Fout 4: Leveranciersrisico bij IT parkeren<\/strong><br>\u2192 <strong>Beter:<\/strong> Behandel het als een bedrijfsrisico met duidelijk eigenaarschap<\/p>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Wil je leveranciersrisico beheersbaar maken \u2014 in plaats van eindeloos?<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Wij maken van leveranciersrisico geen bureaucratie.<br>We helpen je een <strong>pragmatische, bewijsbare aanpak<\/strong> te bouwen die past bij jouw omvang, sector en delivery-stack.<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\">Praktische leveranciersrisico-routine afgestemd op Artikel 21<\/li>\n\n\n\n<li class=\" eplus-wrapper\">Documentatie die klaar is voor klant-due-diligence<\/li>\n<\/ul>\n\n\n\n<div class=\" wp-block-cover alignfull is-repeated eplus-wrapper\" style=\"min-height:146px;aspect-ratio:unset;\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim-40 has-background-dim\" style=\"background-color:#000000\"><\/span><div role=\"img\" class=\"wp-block-cover__image-background wp-image-41706 is-repeated\" style=\"background-position:50% 50%;background-image:url(https:\/\/sunbytes.io\/wp-content\/uploads\/2025\/12\/test.png)\"><\/div><div class=\"wp-block-cover__inner-container is-layout-flow wp-block-cover-is-layout-flow\">\n<p class=\"has-text-align-center eplus-wrapper wp-block-paragraph\" style=\"font-size:25px\"><strong>Leveringsproces conform ISO 27001<\/strong> <strong>\u2022 GDPR-bewust ontworpen<\/strong> <strong>\u2022 Ervaring met ondersteuning van ISO 27001<\/strong><\/p>\n\n\n\n<div class=\"wp-block-buttons eplus-wrapper is-content-justification-center is-layout-flex wp-container-core-buttons-is-layout-4927ffd3 wp-block-buttons-is-layout-flex\">\n<div class=\" wp-block-button eplus-wrapper\"><a class=\"wp-block-button__link has-luminous-vivid-amber-background-color has-background wp-element-button\" href=\"https:\/\/sunbytes.io\/nl\/cybersecurity-service-provider\/sunbytes-compliance-readiness\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Plan een gesprek over naleving van regelgeving<\/strong><\/a><\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n<h2 class=\" wp-block-heading eplus-wrapper\">Over Sunbytes: Transform \u00b7 Secure \u00b7 Accelerate<\/h2>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sunbytes<\/a><\/strong> is gebouwd rond drie pijlers die elkaar versterken:<\/p>\n\n\n\n<ul class=\"eplus-wrapper wp-block-list\">\n<li class=\" eplus-wrapper\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/tech-service\/\" target=\"_blank\" rel=\"noreferrer noopener\">Transform:<\/a><\/strong> We moderniseren producten en delivery \u2014 zodat groei geen verborgen kwetsbaarheid introduceert<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/cybersecurity-service-provider\/\" target=\"_blank\" rel=\"noreferrer noopener\">Secure:<\/a><\/strong> We maken cybersecurity praktisch en operationeel \u2014 zodat risicobeheersing onderdeel wordt van hoe je levert<\/li>\n\n\n\n<li class=\" eplus-wrapper\"><strong><a href=\"https:\/\/sunbytes.io\/nl\/hr-diensten\/\" target=\"_blank\" rel=\"noreferrer noopener\">Accelerate<\/a>:<\/strong> We helpen organisaties schalen met de juiste mensen en systemen \u2014 zodat snelheid niet ten koste gaat van kwaliteit of compliance<\/li>\n<\/ul>\n\n\n\n<p class=\"eplus-wrapper wp-block-paragraph\">Samen helpen deze pijlers EU-MKB\u2019s om te bewegen van <strong>\u201cwe denken dat het wel goed zit\u201d<\/strong> naar <strong>\u201cwe kunnen het aantonen\u201d<\/strong> \u2014 zeker wanneer leveranciersrisico de kortste route naar echte incidenten blijkt.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAQs<\/h2>\n<section class=\"faq-section faq-section--full alignfull wp-block-sb-block-faq-section is-layout-flow wp-block-sb-block-faq-section-is-layout-flow\">\n            \n        <div class=\"faq-section__items\">\n            <div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-9\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-10\"\n        >\n            <span class=\"faq-item__question-text\">Wat bedoelt NIS2 met \u201csupply chain security\u201d?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-10\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-9\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Het omvat beveiligingsaspecten van je relaties met directe leveranciers of dienstverleners als onderdeel van je risicobeheersmaatregelen.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-11\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-12\"\n        >\n            <span class=\"faq-item__question-text\">Hebben EU-MKB\u2019s een volledig third-party riskprogramma nodig voor NIS2?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-12\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-11\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Niet per se. Een herhaalbare, proportionele aanpak met focus op directe kritieke leveranciers, duidelijke besluiten en bewijs is vaak de sterkste start.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-13\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-14\"\n        >\n            <span class=\"faq-item__question-text\">Hoe verhouden security questionnaires van afnemers zich tot NIS2?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-14\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-13\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            Omdat afnemers verantwoordelijk worden voor hun eigen leveranciersrisico, vragen zij om bewijs. Een <a href=\"https:\/\/sunbytes.io\/nl\/blog\/cyberbeveiliging\/vendor-security-questionnaires\/\" target=\"_blank\" rel=\"noopener\">Answer Pack<\/a> verhoogt snelheid en consistentie.        <\/div>\n    <\/div>\n<\/div>\n<div class=\"faq-item wp-block-sb-block-faq-item\" data-faq-item=\"true\">\n        <h3 class=\"faq-item__question\">\n        <button\n            class=\"faq-item__trigger\"\n            type=\"button\"\n            id=\"faq-trigger-15\"\n            aria-expanded=\"false\"\n            aria-controls=\"faq-panel-16\"\n        >\n            <span class=\"faq-item__question-text\">Moeten cybersecurity-eisen in leverancierscontracten worden opgenomen?<\/span>\n            <svg\n                class=\"faq-item__icon\"\n                width=\"20\"\n                height=\"20\"\n                viewBox=\"0 0 20 20\"\n                aria-hidden=\"true\"\n                focusable=\"false\"\n                xmlns=\"http:\/\/www.w3.org\/2000\/svg\"\n            >\n                <path\n                    d=\"M5 7.5L10 12.5L15 7.5\"\n                    stroke=\"currentColor\"\n                    stroke-width=\"1.75\"\n                    stroke-linecap=\"round\"\n                    stroke-linejoin=\"round\"\n                    fill=\"none\"\n                \/>\n            <\/svg>\n        <\/button>\n    <\/h3>\n    <div\n        id=\"faq-panel-16\"\n        class=\"faq-item__panel\"\n        role=\"region\"\n        aria-labelledby=\"faq-trigger-15\"\n        hidden\n    >\n        <div class=\"faq-item__answer\">\n            NIS2 onderstreept het belang van het opnemen van cybersecuritymaatregelen in contractuele afspraken met directe leveranciers en dienstverleners.        <\/div>\n    <\/div>\n<\/div>\n        <\/div>\n\n            <\/section>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" id=\"contact\" class=\"contact wp-block-spacer eplus-wrapper\"><\/div>\n\n\n","protected":false},"excerpt":{"rendered":"<p>Veel gesprekken over NIS2 beginnen bij beleid.Maar veel echte incidenten beginnen ergens anders: Daarom behandelt NIS2 ketenrisico niet als een \u201coptionele extra\u201d. Het plaatst dit expliciet binnen de risicobeheersmaatregelen van Artikel 21 \u2014 inclusief de beveiligingsaspecten van je relaties met directe leveranciers of dienstverleners. Dit artikel is bewust praktisch opgezet. Geen juridische diepduiken, geen \u201cdownload [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":28307,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"related_mode":"latest","related_category":0,"related_post_ids":[],"footnotes":""},"categories":[],"tags":[],"class_list":["post-28300","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB<\/title>\n<meta name=\"description\" content=\"Een praktische, vertrouwen-gedreven gids voor NIS2 supply chain security (Artikel 21): wat \u201cdirecte leveranciers\u201d betekent, wat afnemers verwachten, en hoe EU-MKB-bedrijven verdedigbaar leveranciersrisico opbouwen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB\" \/>\n<meta property=\"og:description\" content=\"Een praktische, vertrouwen-gedreven gids voor NIS2 supply chain security (Artikel 21): wat \u201cdirecte leveranciers\u201d betekent, wat afnemers verwachten, en hoe EU-MKB-bedrijven verdedigbaar leveranciersrisico opbouwen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Sunbytes\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-01T11:08:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-15T09:08:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Uyen Pham\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Uyen Pham\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#organization\",\"name\":\"Sunbytes\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/SUNBYTES-LOGO.svg\",\"contentUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/SUNBYTES-LOGO.svg\",\"width\":120,\"height\":30,\"caption\":\"Sunbytes\"},\"image\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"knowsAbout\":[\"HR Solutions\",\"Payroll service\",\"EOR service\",\"Tech services\",\"Security services\"]},{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/\"},\"author\":{\"name\":\"Uyen Pham\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/person\\\/1a2ebd7868cce7f226c488f5c29f908f\"},\"headline\":\"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB\",\"datePublished\":\"2026-02-01T11:08:06+00:00\",\"dateModified\":\"2026-09-15T09:08:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/\"},\"wordCount\":1117,\"publisher\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp\",\"inLanguage\":\"nl-NL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/\",\"name\":\"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp\",\"datePublished\":\"2026-02-01T11:08:06+00:00\",\"dateModified\":\"2026-09-15T09:08:07+00:00\",\"description\":\"Een praktische, vertrouwen-gedreven gids voor NIS2 supply chain security (Artikel 21): wat \u201cdirecte leveranciers\u201d betekent, wat afnemers verwachten, en hoe EU-MKB-bedrijven verdedigbaar leveranciersrisico opbouwen.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp\",\"contentUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp\",\"width\":1200,\"height\":628,\"caption\":\"NIS2 Article 21 Supply Chain Security Supplier Risk & Vendor Due Diligence for EU SMEs\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/ongecategoriseerd\\\/nis2-article-21-supply-chain-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/\",\"name\":\"Sunbytes\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/#\\\/schema\\\/person\\\/1a2ebd7868cce7f226c488f5c29f908f\",\"name\":\"Uyen Pham\",\"pronouns\":\"She\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/1736750884545-100x100.jpg\",\"url\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/1736750884545-100x100.jpg\",\"contentUrl\":\"https:\\\/\\\/sunbytes.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/1736750884545-100x100.jpg\",\"caption\":\"Uyen Pham\"},\"description\":\"Uyen Pham is a B2B technology marketer and content strategist who turns complex topics into clear, practical insights for business leaders. She writes primarily about Business Transformation Solutions and Cybersecurity Solutions, helping readers better understand how to modernise operations, strengthen security, and make informed technology decisions. Her articles combine industry news and practical guidance that businesses can apply to real-world challenges.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/uyen-karen-pham-392b351a1\\\/\"],\"url\":\"https:\\\/\\\/sunbytes.io\\\/nl\\\/blog\\\/author\\\/uyen-pham\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB","description":"Een praktische, vertrouwen-gedreven gids voor NIS2 supply chain security (Artikel 21): wat \u201cdirecte leveranciers\u201d betekent, wat afnemers verwachten, en hoe EU-MKB-bedrijven verdedigbaar leveranciersrisico opbouwen.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/","og_locale":"nl_NL","og_type":"article","og_title":"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB","og_description":"Een praktische, vertrouwen-gedreven gids voor NIS2 supply chain security (Artikel 21): wat \u201cdirecte leveranciers\u201d betekent, wat afnemers verwachten, en hoe EU-MKB-bedrijven verdedigbaar leveranciersrisico opbouwen.","og_url":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/","og_site_name":"Sunbytes","article_published_time":"2026-02-01T11:08:06+00:00","article_modified_time":"2026-09-15T09:08:07+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp","type":"image\/webp"}],"author":"Uyen Pham","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Uyen Pham"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/sunbytes.io\/nl\/#organization","name":"Sunbytes","url":"https:\/\/sunbytes.io\/nl\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/08\/SUNBYTES-LOGO.svg","contentUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/08\/SUNBYTES-LOGO.svg","width":120,"height":30,"caption":"Sunbytes"},"image":{"@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/logo\/image\/"},"knowsAbout":["HR Solutions","Payroll service","EOR service","Tech services","Security services"]},{"@type":"Article","@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#article","isPartOf":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/"},"author":{"name":"Uyen Pham","@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/person\/1a2ebd7868cce7f226c488f5c29f908f"},"headline":"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB","datePublished":"2026-02-01T11:08:06+00:00","dateModified":"2026-09-15T09:08:07+00:00","mainEntityOfPage":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/"},"wordCount":1117,"publisher":{"@id":"https:\/\/sunbytes.io\/nl\/#organization"},"image":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#primaryimage"},"thumbnailUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp","inLanguage":"nl-NL"},{"@type":"WebPage","@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/","url":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/","name":"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB","isPartOf":{"@id":"https:\/\/sunbytes.io\/nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#primaryimage"},"image":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#primaryimage"},"thumbnailUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp","datePublished":"2026-02-01T11:08:06+00:00","dateModified":"2026-09-15T09:08:07+00:00","description":"Een praktische, vertrouwen-gedreven gids voor NIS2 supply chain security (Artikel 21): wat \u201cdirecte leveranciers\u201d betekent, wat afnemers verwachten, en hoe EU-MKB-bedrijven verdedigbaar leveranciersrisico opbouwen.","breadcrumb":{"@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#primaryimage","url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp","contentUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/02\/NIS2-Article-21-Supply-Chain-Security-Supplier-Risk-Vendor-Due-Diligence-for-EU-SMEs.webp","width":1200,"height":628,"caption":"NIS2 Article 21 Supply Chain Security Supplier Risk & Vendor Due Diligence for EU SMEs"},{"@type":"BreadcrumbList","@id":"https:\/\/sunbytes.io\/nl\/blog\/ongecategoriseerd\/nis2-article-21-supply-chain-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sunbytes.io\/nl\/"},{"@type":"ListItem","position":2,"name":"NIS2 Artikel 21 Supply Chain Security: Leveranciersrisico en Vendor Due Diligence voor EU-MKB"}]},{"@type":"WebSite","@id":"https:\/\/sunbytes.io\/nl\/#website","url":"https:\/\/sunbytes.io\/nl\/","name":"Sunbytes","description":"","publisher":{"@id":"https:\/\/sunbytes.io\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sunbytes.io\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Person","@id":"https:\/\/sunbytes.io\/nl\/#\/schema\/person\/1a2ebd7868cce7f226c488f5c29f908f","name":"Uyen Pham","pronouns":"She","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/06\/1736750884545-100x100.jpg","url":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/06\/1736750884545-100x100.jpg","contentUrl":"https:\/\/sunbytes.io\/wp-content\/uploads\/2026\/06\/1736750884545-100x100.jpg","caption":"Uyen Pham"},"description":"Uyen Pham is a B2B technology marketer and content strategist who turns complex topics into clear, practical insights for business leaders. She writes primarily about Business Transformation Solutions and Cybersecurity Solutions, helping readers better understand how to modernise operations, strengthen security, and make informed technology decisions. Her articles combine industry news and practical guidance that businesses can apply to real-world challenges.","sameAs":["https:\/\/www.linkedin.com\/in\/uyen-karen-pham-392b351a1\/"],"url":"https:\/\/sunbytes.io\/nl\/blog\/author\/uyen-pham\/"}]}},"_links":{"self":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/posts\/28300","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/comments?post=28300"}],"version-history":[{"count":0,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/posts\/28300\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/media\/28307"}],"wp:attachment":[{"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/media?parent=28300"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/categories?post=28300"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunbytes.io\/nl\/wp-json\/wp\/v2\/tags?post=28300"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}