It is expected of NIS2-affected companies to make clear contractual agreements with their service providers, suppliers, and partners in order to comprehensively implement cyber security in their supply chain, including, for example, agreements on confidential and secure communications. This means that investments in cyber security, such as email encryption, are also an essential basis for future business success.