Initial situation:
- Lack of visibility into supply chain cyber risk
- No definition of “critical supplier” or assessment model at scale
- Unclear ownership between cybersecurity and supply chain management
- NIS-2 compliance at risk
Our approach:
- Joint approach: cybersecurity, legal & supply chain management incl. Charter of Trust
- Framework for supplier risk & criticality classification
- Tiered assessments: expert-led for high risk, 3rd party for medium, self-assessment for low
Results:
- Standardized outreach (approach, tooling, reporting) backed by central budget
- 700+ critical suppliers assessed and tracked
- Quarterly management reporting
- Scalable foundation for ongoing governance
Conclusion
From crisis to stability – delivering a complete turnaround through restructuring, relocation, and industrial ramp-up.
