How do we check thousands of suppliers for security certificates without researching each one by hand?
For Procurement and information security
In short
With an application that takes a whole supplier list, finds each supplier’s web domain, looks up valid certificates such as ISO 27001 and files the evidence. Procurement only reviews the unclear cases. Built with Creavity, it runs in your environment, and the supplier data stays in-house.
75–85%
less manual effort (expected)
10+ min
per supplier when checked by hand
In-house
supplier list and evidence stay with you
The situation
Suppliers have to be qualified for cybersecurity, not least because of the supply-chain requirements under NIS2. By hand it takes a good ten minutes per supplier: find the domain, search for the certificate, file the evidence. With a five-figure number of suppliers, that cannot be done.
The solution with Creavity
With Creavity, procurement got an application that does the research:
- automatic lookup of each supplier’s web domain
- search for valid certificates such as ISO 27001
- evidence packages that stand up to an audit
- a review list with only the unclear cases
The result
The business unit expects 75 to 85 percent less manual effort for the review team.
From a real project on Creavity, described in general terms: no customer, system or department names. Figures marked "expected" are the business unit’s own estimates, not measured results. Updated: .
More questions
What does NIS2 require regarding suppliers?
NIS2 requires companies in scope to manage risks in their supply chain, including the cybersecurity of important suppliers. Evidence such as ISO 27001 certificates helps with that. Which obligations apply to your company is best clarified with your legal or compliance team.
Where is the supplier data kept?
In your own environment. The application runs where Creavity runs – in your cloud or your data center – and the supplier list and evidence stay with you.