Score an ICT vendor's diligence posture against NIS2 Article 21(2)(d) supply-chain security requirements and the ENISA framework. Evaluates 7 controls: ISO 27001 certification, incident history, contractual audit rights, breach notification SLA, EU data residency, subcontractor exposure, and availability SLA.
NIS2 Art.21(2)(d)ENISA Framework7 ControlsActive Oct 2024W3C VC §13.11Zero PII
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Scope
Middle node of the nis2-incident-response chain (art-144→145). Scores ICT vendor supply-chain diligence across 7 ENISA-aligned controls. Risk score 0–100+ maps to tiers: low (0–20), medium (21–50), high (51–80), critical (>80). Each active risk flag adds to the score; critical/high tiers trigger NIS2_SUPPLY_CHAIN_REMEDIATION_REQUIRED flag.
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.
Run the AINumbers MCP tool `score_nis2_supply_chain_diligence`. Task: Score ICT vendor supply-chain diligence against NIS2 Article 21(2)(d) and ENISA framework.
Call it with arguments: {"policy_parameters":{"vendor_iso27001_certified":true,"vendor_incident_history_12mo":0,"audit_clause_in_contract":true,"breach_notification_sla_hours":24,"data_residency_eu_only":true,"sub_contractor_count":2,"service_availability_pct":99.9}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string, or re-run the in-page WebMCP tool `score_nis2_supply_chain_diligence`.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-145-nis2-ict-supply-chain-diligence-scorer.html#p=v1.H4sIAAAAAAAA_wHdACL_eyJ2ZW5kb3JfaXNvMjcwMDFfY2VydGlmaWVkIjp0cnVlLCJ2ZW5kb3JfaW5jaWRlbnRfaGlzdG9yeV8xMm1vIjowLCJhdWRpdF9jbGF1c2VfaW5fY29udHJhY3QiOnRydWUsImJyZWFjaF9ub3RpZmljYXRpb25fc2xhX2hvdXJzIjoyNCwiZGF0YV9yZXNpZGVuY3lfZXVfb25seSI6dHJ1ZSwic3ViX2NvbnRyYWN0b3JfY291bnQiOjIsInNlcnZpY2VfYXZhaWxhYmlsaXR5X3BjdCI6OTkuOX05rD6Y3QAAAA