Is a manufacturing company with fewer than 50 employees in scope of NIS2?

Rarely directly. NIS2 typically applies to companies with at least 50 employees or €10 million in turnover combined with a covered sector, and manufacturing is one of them. Smaller companies are, however, affected indirectly through supplier requirements from larger customers. Ejerblik helps with exactly the documentation those customers will ask for.

How do we map remote access from machine suppliers?

Ejerblik structures each supplier access as an asset: which supplier, which access type (VPN, remote tool, other), which equipment, who at your company is responsible, when the access was last used. It gives the first real overview many manufacturers have never had.

Does Ejerblik cover OT as well, or only office IT?

Both. The library contains typical OT assets such as SCADA, PLC controllers and MES systems alongside ERP, Microsoft 365 and finance. You map all of it in the same register, so management gets one shared picture.

Is our company itself in scope of NIS2?

NIS2 typically applies to companies with at least 50 employees or €10 million in turnover that sit within one of the sectors the directive covers. Most small and mid-sized companies under 50 employees are not directly in scope. Many are affected indirectly, though: the larger customers who are in scope have to manage their suppliers, and will therefore ask for documentation of access, supplier management and critical systems.

What do we need to be able to document for our customers?

Typically: an overview of which digital assets are used in the relationship, who at your company has access, how access is removed when employees leave, which subcontractors your data passes through, and how you handle incidents. Ejerblik gathers it in one asset register with an owner, a responsible person and a status per asset.

Industry insight · Manufacturing

Three machine suppliers have remote access. Nobody knows exactly who, for what, or when last used

Manufacturing companies today run on a mix of ERP, MES, SCADA and remote support from suppliers. When the NIS2 customers ask questions, or an incident hits, it has to be documented. Ejerblik gathers it in one register.

Take the Owner Check in 3 min

No lock-in · Support in English · GDPR compliant

In short

Ejerblik maps manufacturing companies' critical digital assets, from ERP and MES to SCADA and supplier remote access. You get one asset register with an owner, a responsible person and a status, ready for NIS2 supplier requirements, IT audits and incident handling.

Why now

The three pain points we hear again and again in manufacturing

Supplier remote access is a black hole

Machine and automation suppliers have historically been given remote access to production equipment. Few companies can say today who, when, or which access is still active. It is the first thing your NIS2 customers will ask about.

OT and IT still live apart, but threats do not

Production systems are run by one world, office IT by another. Nobody has the combined overview. When something goes wrong, you lack a shared register of what exists, who has access, and what the impact of a failure is.

Larger customers require documentation NOW

Utilities, transport, healthcare and the public sector are in scope of NIS2 and are being audited. They pass the requirements on to you as a supplier: can you document your access, suppliers and critical systems? If not, you lose tenders.

Are you yourself in scope of NIS2?

NIS2 typically applies to companies with at least 50 employees or €10 million in turnover that sit within one of the sectors the directive covers. Most small and mid-sized companies below that size are not directly in scope.

Many are affected indirectly, though: your larger customers are in scope and have to manage their suppliers. That means you will be asked to document access management, critical systems and how you handle incidents. That is the pain Ejerblik solves.

This is what your digital reality looks ud

You run your company through more systems than you think

Typical systems in manufacturing:

ERP (e.g. Dynamics 365, Monitor) · ERP
MES (Manufacturing Execution) · Production
SCADA / PLC control · Operational technology
Microsoft 365 · Email, files, identity
Remote access for machine suppliers · Supplier access
CAD / PDM · Drawings and product data
Accounting system · Finance
Domain · Web address

Assets we typically find

The systems that typically live in manufacturing

Ejerblik's library holds 430+ assets. These are typical for your industry, and each with an owner, a responsible person and a status.

Digital assets we typically find at companies in manufacturing
Asset	Category	Typical owner
ERP (e.g. Dynamics 365, Monitor)	ERP	CFO or IT manager
MES (Manufacturing Execution)	Production	Production manager
SCADA / PLC control	Operational technology	Automation supplier
Microsoft 365	Email, files, identity	External IT
Remote access for machine suppliers	Supplier access	Unclear
CAD / PDM	Drawings and product data	Engineering
Accounting system	Finance	Bookkeeper
Domain	Web address	Former agency

This is what your report could look ud

One view, ready for management or a customer audit.

app.ejerblik.com/report

Assets that need action

An example of the report's action list
Asset	Category	Status
Machine supplier A (remote tool)	Remote access	Active, no owner
Machine supplier B (VPN)	Remote access	Last used: unknown
ERP	ERP	MFA missing
SCADA production 1	OT	No documentation
Microsoft 365 (admin)	Identity	External admin only

Get the same insight for your company

6active supplier access paths on average we found to production equipment at manufacturers with no central overview.

Source: Ejerblik pilot data 2025

Questions and answers

What we are typically asked

Get the overview for manufacturing

One asset register. Ready for your larger customers, your accountant and your own peace of mind.