NIS2 compliance for manufacturing & food

The Dutch NIS2 implementation (Cyberbeveiligingswet) covers manufacturing and food businesses. Normatik guides you step by step, with attention to the risks in your sector — from OT systems to the food supply chain.

✓ Fully configurable to your business
✓ OT and IT risks in one overview
✓ From €149/month — no hidden costs
✓ Support can always be purchased separately — no unnecessary costs

Your sector

Two sectors, their own risks

Manufacturing

Annex 2 — Important entity
  • OT systems and SCADA
  • Production line networks
  • Long supply chain

Food

Annex 2 — Important entity
  • Food safety
  • Cold chain IT
  • HACCP alongside NIS2

Does NIS2 apply to you? It does with 50 or more employees (FTE), or with fewer employees if both annual turnover and the balance sheet total exceed €10 million.

Why your sector

NIS2 for manufacturing & food

The manufacturing and food sectors face their own cybersecurity risks. Normatik is set up around what matters in your business.

OT systems & production lines

Manufacturers use operational technology (OT) that is often connected to IT networks. A cyberattack on a PLC or SCADA system can bring production to a complete halt.

Relevant to: machinery manufacturers, metalworking, chemicals, automotive

Long supply chains

Manufacturing and food businesses have supply chains with dozens of suppliers. NIS2 requires you to take your suppliers’ cybersecurity into account and document it.

Relevant to: ingredient suppliers, packaging, logistics

Critical IT dependencies

From cold chain monitoring to quality records — food businesses depend heavily on IT. Outages can lead to food safety issues and recalls.

Relevant to: food producers, distribution centres, retailers

Existing standards

Already working with HACCP, BRC, IFS or ISO 22000? Use Normatik to record what is already in place. You remain free to use your own methodology, so NIS2 compliance does not become an entirely new undertaking.

Relevant to: businesses with existing quality systems

Adapted to manufacturing & food

This is how the ten cybersecurity risk-management measures of Article 21 apply to a manufacturing or food business.
1

Risk analysis

Includes OT risks in production environments and IT dependencies in the food chain.

OT + IT
2

Incident handling

Plan how to detect, contain and handle incidents in production and food operations, and how to notify the relevant supervisory authority and the national CSIRT within 24 hours.

3

Business continuity

Backup and recovery plans for production outages and cold chain disruptions.

Production line
4

Supply chain security

Record how you assess your suppliers’ cybersecurity. Essential for long manufacturing and food supply chains.

Supply chain security
5

Cyber hygiene and training

Record how you raise awareness of cyber risks among production workers and office staff. We can provide introductory NIS2 training for management.

6

Network & information security

Protect both IT networks and OT networks in production environments.

OT segmentation
7

Personnel, access & asset management

Record security responsibilities, access rights and assets for employees and external technicians.

8

Authentication

Use multi-factor authentication for critical systems, including SCADA access.

9

Cryptography

Encrypt sensitive production and recipe data in transit and in your database.

Recipe data
10

Effectiveness assessment

Normatik reopens all components every year, so you keep reviewing your policies instead of ticking them off once.

Always see your compliance status

See at a glance where you stand, which measures still need attention and what the next step is. Share the overview with your management or your customer.

Normatik — Compliance dashboard
Compliance NIS2 / Cyberbeveiligingswet
72% compliant
Compliant 13
Partial 4
Not 1
Sector-specific focus areas
ZP-04 Supply chain security
Not
ZP-03 Business continuity
Partial
ZP-07 Cyber hygiene and training
Partial
ZP-01 Risk analysis (incl. OT)
Compliant

From €149 /month

Includes all 10 NIS2 measures, the compliance dashboard and the compliance report. Advice, full support and introductory NIS2 training for management can be purchased separately.

Is your manufacturing or food business ready?

In a demo, we will show you how Normatik works for your business and what you still need to take care of.

Request a free demo →