{"id":6222,"date":"2026-10-05T08:13:53","date_gmt":"2026-10-05T08:13:53","guid":{"rendered":"https:\/\/adex.com\/blog\/?p=6222"},"modified":"2026-10-05T08:13:54","modified_gmt":"2026-10-05T08:13:54","slug":"nis2-supplier-security-adtech","status":"publish","type":"post","link":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/","title":{"rendered":"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On September 15, 2026, ADEX sponsored <a href=\"https:\/\/cybersecurity.imhbusiness.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">the 6th Cyber Security Conference<\/a> at the Hilton Nicosia. The event ran under the auspices of Cyprus&#8217; Digital Security Authority and was organized by IMH together with the ISACA Cyprus Chapter. ADEX was among the sponsors, alongside Mastercard, Thales and Kyndryl. That line-up is worth a second look: a payment network, two enterprise security vendors, and an adtech anti-fraud platform, all funding the same conversation. Ad fraud has moved out of the marketing agenda and into the security one.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NIS2 came up all day. On the panel &#8220;NIS2: From Directive to Executive Accountability,&#8221; Farukh Rakhimov, Head of Financial and Compliance Group at AdTech Holding, talked about turning the directive into owners, processes, and evidence. The full panel recap is on the <a href=\"https:\/\/adtechholding.com\/blog\/nis2-panel-cyber-security-conference\/\" data-type=\"link\" data-id=\"https:\/\/adtechholding.com\/blog\/nis2-panel-cyber-security-conference\/\" target=\"_blank\" rel=\"noreferrer noopener\">AdTech Holding blog<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This post covers one part of that discussion, the part that matters most for adtech: suppliers.<\/p>\n\n\n    <div class=\"block__quote\">\n        <div class=\"block__quote_desc\"><p>This is an account of a conference discussion and of one practitioner&#8217;s approach, not compliance or legal advice. Organizations should confirm their own obligations under NIS2 and its national transpositions.<\/p>\n<\/div>\n            <\/div>\n    <style>\n        .block__quote {\n            margin: 32px 0;\n            padding-left: 20px;\n            border-left: 3px solid #00B8A7;\n        }\n\n        .block__quote_desc {\n            margin-bottom: 24px !important;\n        }\n        .block__quote_desc *{\n            font-weight: 700 !important;\n            font-size: 18px !important;\n            line-height: 28px !important;\n        }\n\n        .block__quote_author {\n            display: block;\n            font-size: 22px !important;\n            font-weight: 700 !important;\n            line-height: 30px !important;\n        }\n        a.block__quote_author {\n            color: #00B8A7;\n        }\n        a.block__quote_author:hover {\n            color: #FE645A;\n            text-decoration: none;\n        }\n    <\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-nis2-asks-about-suppliers\">What NIS2 Asks About Suppliers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In short, <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32022L2555\">NIS2<\/a> expects companies to know who their suppliers are, what those suppliers touch, and what happens if one of them fails. Supply chain security is listed among the required risk-management measures in Article 21. Article 23 then sets the reporting clock for significant incidents: an early warning within 24 hours, a full notification within 72 hours, and a final report within a month of that notification.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At the panel, Farukh summed it up in one line: <\/p>\n\n\n    <div class=\"block__quote\">\n        <div class=\"block__quote_desc\"><p>&#8220;You can outsource a service, but you cannot outsource accountability.&#8221;<\/p>\n<\/div>\n            <\/div>\n    <style>\n        .block__quote {\n            margin: 32px 0;\n            padding-left: 20px;\n            border-left: 3px solid #00B8A7;\n        }\n\n        .block__quote_desc {\n            margin-bottom: 24px !important;\n        }\n        .block__quote_desc *{\n            font-weight: 700 !important;\n            font-size: 18px !important;\n            line-height: 28px !important;\n        }\n\n        .block__quote_author {\n            display: block;\n            font-size: 22px !important;\n            font-weight: 700 !important;\n            line-height: 30px !important;\n        }\n        a.block__quote_author {\n            color: #00B8A7;\n        }\n        a.block__quote_author:hover {\n            color: #FE645A;\n            text-decoration: none;\n        }\n    <\/style>\n\n\n\n<p class=\"wp-block-paragraph\">Whether a given adtech company falls under NIS2 depends on its sector, size, and the national rules that implement it. Even outside direct scope, clients that are covered may ask for supplier-security terms in their contracts. So the question still comes up, just through a different route.<\/p>\n\n\n<div class=\"block__preview\">\n        <a href=\"https:\/\/adex.com\/blog\/threat-scoring-ad-networks-brand-safety\/\" class=\"block__preview_img\" target=\"_blank\"><img src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/06\/Adex-Threat-Scoring-Ad-Networks.png\" srcset=\"\" sizes=\"100vw\" alt=\"Adex - guide explaining threat scoring in ad networks, including fraud signals, brand safety risk levels, GIVT, SIVT, and traffic quality checks.\" decoding=\"async\" class=\"lazy\"><\/a>\n    <div class=\"block__preview_box\">\n        <a href=\"https:\/\/adex.com\/blog\/category\/guides\/\" class=\"block__preview_box-cat\" target=\"_blank\">Guides<\/a>        <h3 class=\"block__preview_box-title\" id=\"how-threat-scoring-works-in-ad-networks-a-brand-safety-risk-assessment-guide\"><a href=\"https:\/\/adex.com\/blog\/threat-scoring-ad-networks-brand-safety\/\" target=\"_blank\">How Threat Scoring Works in Ad Networks: A Brand Safety Risk Assessment Guide<\/a><\/h3>\n    <\/div>\n<\/div>\n<style>\n.block__preview {display: flex;align-items: center;justify-content: center; margin: 40px 0; padding: 20px 0; background: radial-gradient(76.53% 26.84% at 50% 104.88%, #74fbe9 0%, rgba(255, 255, 255, 0) 100%), radial-gradient(33.91% 48.03% at 98.2% 0%, rgba(64, 236, 255, 0.9) 0%, rgba(255, 255, 255, 0) 100%), radial-gradient(47.39% 67.13% at 7.11% -25.12%, rgba(0, 251, 184, 0.9) 0%, rgba(255, 255, 255, 0) 100%), #ffffff;border-radius: 24px;}\n.block__preview a {text-decoration: none;}\n.block__preview_img {min-width: 360px;max-width: 360px;min-height: 188px;width: 100%;height: 100%;}\n.block__preview_img img {width: 100%;height: 100%;border-radius: 24px;}\n.block__preview_box {margin-left: 40px;max-width: 360px;}\n.block__preview_box-cat {color: #00B8A7 !important;font-weight: 600;font-size: 12px;line-height: 16px;text-transform: uppercase; display: block; margin-bottom: 4px;}\n.block__preview_box-cat:hover {color: #FE645A !important; text-decoration: none !important;}\n.block__preview_box-title {font-size: 20px;font-weight: 700;line-height: 24px;color: #0B172D;}\n.block__preview_box-title a {color: #0B172D !important;}\n.block__preview_box-title a:hover {color: #FE645A !important;}\n@media screen and (max-width: 768px) {.block__preview {flex-direction: column;}.block__preview_box {max-width: 100%; margin-top: 32px;margin-left: 0px;}.block__preview_img {max-width: 100%;min-width: 100%;min-height: 100%;}}<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"who-counts-as-a-supplier-in-adtech\">Who Counts as a Supplier in Adtech<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In most industries, the supplier list is a spreadsheet: a hosting provider, a payment processor, a few SaaS tools. In adtech, it looks more like this:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>publishers and <a href=\"https:\/\/adex.com\/blog\/adex-ads-txt-app-ads-txt-spoofing\/\" data-type=\"link\" data-id=\"https:\/\/adex.com\/blog\/adex-ads-txt-app-ads-txt-spoofing\/\" target=\"_blank\" rel=\"noreferrer noopener\">every domain they send traffic from<\/a>;<\/li>\n\n\n\n<li>advertisers and every landing page they point to;<\/li>\n\n\n\n<li>trackers, redirect hops and intermediary domains between the click and the landing;<\/li>\n\n\n\n<li>partner platforms on both the supply and the demand side.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">That adds up to thousands of counterparties, and the list changes every day. You can&#8217;t keep it up to date by hand. Even if you could, a list only tells you who someone was on the day you checked.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-a-one-time-check-doesnt-hold\">Why a One-Time Check Doesn&#8217;t Hold<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ADEX specialists documented a case that shows the problem well. A college domain with years of clean history got hacked. The attackers planted a page on it and used Google search inside the redirect chain, so the planted page showed up as an ordinary search result. A user who clicked the ad went through the trusted domain and ended up on a page that had nothing to do with the college.\u00a0<\/p>\n\n\n<div class=\"block__preview\">\n        <a href=\"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/\" class=\"block__preview_img\" target=\"_blank\"><img src=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/09\/Adex-iGaming-Redirect-Chain.png\" srcset=\"\" sizes=\"100vw\" alt=\"Adex - iGaming redirect chain through Google search results and a compromised educational website.\" decoding=\"async\" class=\"lazy\"><\/a>\n    <div class=\"block__preview_box\">\n        <a href=\"https:\/\/adex.com\/blog\/category\/current_risks\/\" class=\"block__preview_box-cat\" target=\"_blank\">Current risks<\/a>        <h3 class=\"block__preview_box-title\" id=\"trusted-domain-untrusted-destination-a-hacked-educational-site-in-an-igaming-redirect-chain\"><a href=\"https:\/\/adex.com\/blog\/igaming-redirect-chain-hacked-educational-site\/\" target=\"_blank\">Trusted Domain, Untrusted Destination: A Hacked Educational Site in an iGaming Redirect Chain<\/a><\/h3>\n    <\/div>\n<\/div>\n<style>\n.block__preview {display: flex;align-items: center;justify-content: center; margin: 40px 0; padding: 20px 0; background: radial-gradient(76.53% 26.84% at 50% 104.88%, #74fbe9 0%, rgba(255, 255, 255, 0) 100%), radial-gradient(33.91% 48.03% at 98.2% 0%, rgba(64, 236, 255, 0.9) 0%, rgba(255, 255, 255, 0) 100%), radial-gradient(47.39% 67.13% at 7.11% -25.12%, rgba(0, 251, 184, 0.9) 0%, rgba(255, 255, 255, 0) 100%), #ffffff;border-radius: 24px;}\n.block__preview a {text-decoration: none;}\n.block__preview_img {min-width: 360px;max-width: 360px;min-height: 188px;width: 100%;height: 100%;}\n.block__preview_img img {width: 100%;height: 100%;border-radius: 24px;}\n.block__preview_box {margin-left: 40px;max-width: 360px;}\n.block__preview_box-cat {color: #00B8A7 !important;font-weight: 600;font-size: 12px;line-height: 16px;text-transform: uppercase; display: block; margin-bottom: 4px;}\n.block__preview_box-cat:hover {color: #FE645A !important; text-decoration: none !important;}\n.block__preview_box-title {font-size: 20px;font-weight: 700;line-height: 24px;color: #0B172D;}\n.block__preview_box-title a {color: #0B172D !important;}\n.block__preview_box-title a:hover {color: #FE645A !important;}\n@media screen and (max-width: 768px) {.block__preview {flex-direction: column;}.block__preview_box {max-width: 100%; margin-top: 32px;margin-left: 0px;}.block__preview_img {max-width: 100%;min-width: 100%;min-height: 100%;}}<\/style>\n\n\n\n<p class=\"wp-block-paragraph\">A standard onboarding check would most likely have passed that domain. Its reputation was good, its certificate was valid, and it had a real history. The compromise happened afterwards.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is the core issue. A certificate, a clean landing page, or a filled-in onboarding form proves what was visible at one moment. Nothing more.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"the-supplier-clock-is-your-clock\">The Supplier Clock Is Your Clock<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Farukh gave an example at the panel that fits adtech almost too well. Say a partner spots an incident late on a Friday, and their contract gives them a few days to tell you. By the time you hear about it, the 24-hour window NIS2 gives you for an early warning may already be gone. So the deadlines in your supplier contracts have to match the deadlines you answer to yourself.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In adtech, a lot of incidents never get reported by the supplier at all. A <a href=\"https:\/\/adex.com\/blog\/subdomain-takeovers-prevention\/\" data-type=\"link\" data-id=\"https:\/\/adex.com\/blog\/subdomain-takeovers-prevention\/\" target=\"_blank\" rel=\"noreferrer noopener\">hijacked landing domain<\/a> doesn&#8217;t send a notice. You find out from a user complaint, a partner&#8217;s alert, or your own monitoring. If that happens three days later, the compromised page has already been live in your chain for three days, and the first question you get is why nobody noticed sooner.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-continuous-checking-looks-like\">What Continuous Checking Looks Like<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Farukh&#8217;s framework from the panel was simple: every requirement needs an owner, a process, and evidence. For adtech suppliers, that becomes three habits.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Monitor counterparties continuously.<\/strong> You can&#8217;t know what is happening to a partner&#8217;s domains unless you check them regularly, including redirects that only show up for certain GEOs, devices, or referrers.<\/li>\n\n\n\n<li><strong>Classify counterparties by criticality.<\/strong> <a href=\"https:\/\/adex.com\/blog\/threat-scoring-ad-networks-brand-safety\/\" data-type=\"link\" data-id=\"https:\/\/adex.com\/blog\/threat-scoring-ad-networks-brand-safety\/\" target=\"_blank\" rel=\"noreferrer noopener\">Some domains carry more risk than others<\/a>, and some partners touch user data or payment flows. A good reputation shouldn&#8217;t mean automatic approval.<\/li>\n\n\n\n<li><strong>Keep the evidence.<\/strong> Monitoring logs, redirect histories, review records, alerts and enforcement decisions. When a client, partner, or regulator asks what you did, that record is your answer.<\/li>\n<\/ol>\n\n\n<div class=\"block__bord\"><div class=\"block__bord_desc\"><p dir=\"ltr\">ADEX checks partner domains on an ongoing basis and keeps a record of what it finds. If you don&#8217;t want to set all of this up yourself, have a look at <a href=\"https:\/\/adex.com\/prointel\" target=\"_blank\" rel=\"noopener\">ADEX threat intelligence<\/a>.<\/p>\n<\/div><\/div>\n<style>\n.block__bord { margin: 32px 0; padding: 1.25em 2.375em;\tborder-radius: 24px; background: rgba(0, 220, 200, 0.20); }\n.block__bord_desc {font-size: 16px !important;font-weight: 400 !important;color: #606060 !important;}\n<\/style>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"measuring-it\">Measuring It<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Once you keep those records, brand safety stops being a promise and becomes something you can measure. Useful metrics include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Mean time to detection:<\/strong> how long a compromised domain stays in the chain before someone flags it.<\/li>\n\n\n\n<li><strong>Time to takedown:<\/strong> how long it takes from detection to blocking.<\/li>\n\n\n\n<li><strong>Enforcement success rate:<\/strong> how many flagged cases end in a confirmed action.<\/li>\n\n\n\n<li><strong>Channel coverage:<\/strong> what share of traffic sources and landing domains are actually being monitored.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These are the numbers that show whether supplier oversight actually works, which is the kind of evidence the panel kept coming back to.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On September 15, 2026, ADEX sponsored the 6th Cyber Security Conference at the Hilton Nicosia. The event ran under the auspices of Cyprus&#8217; Digital Security Authority and was organized by IMH together with the ISACA Cyprus Chapter. ADEX was among the sponsors, alongside Mastercard, Thales and Kyndryl. That line-up is worth a second look: a [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":6228,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6222","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guides"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech - ADEX<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech - ADEX\" \/>\n<meta property=\"og:description\" content=\"On September 15, 2026, ADEX sponsored the 6th Cyber Security Conference at the Hilton Nicosia. The event ran under the auspices of Cyprus&#8217; Digital Security Authority and was organized by IMH together with the ISACA Cyprus Chapter. ADEX was among the sponsors, alongside Mastercard, Thales and Kyndryl. That line-up is worth a second look: a [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/\" \/>\n<meta property=\"og:site_name\" content=\"ADEX\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adexsaas\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-05T08:13:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-05T08:13:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/10\/adex-cyber-security-conference.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Olya Mikheeva\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adexsaas\" \/>\n<meta name=\"twitter:site\" content=\"@adexsaas\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Olya Mikheeva\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/\"},\"author\":{\"name\":\"Olya Mikheeva\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/person\\\/c5794aef7aa28987e7019a804390ee3a\"},\"headline\":\"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech\",\"datePublished\":\"2026-10-05T08:13:53+00:00\",\"dateModified\":\"2026-10-05T08:13:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/\"},\"wordCount\":888,\"publisher\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/adex-cyber-security-conference.png\",\"articleSection\":[\"Guides\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/\",\"name\":\"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech - ADEX\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/adex-cyber-security-conference.png\",\"datePublished\":\"2026-10-05T08:13:53+00:00\",\"dateModified\":\"2026-10-05T08:13:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#primaryimage\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/adex-cyber-security-conference.png\",\"contentUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/adex-cyber-security-conference.png\",\"width\":1200,\"height\":628,\"caption\":\"NIS2 makes you accountable for your suppliers. In adtech that means thousands of domains. Here's why onboarding checks fall short and what to do instead.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/nis2-supplier-security-adtech\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/adex.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/\",\"name\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\"},\"alternateName\":\"ADEX\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/adex.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#organization\",\"name\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/CDD2258_copy-48-1.svg\",\"contentUrl\":\"https:\\\/\\\/adex.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/CDD2258_copy-48-1.svg\",\"width\":148,\"height\":30,\"caption\":\"ADEX - Ad Fraud & Invalid Traffic Prevention Platform\"},\"image\":{\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/adexsaas\\\/\",\"https:\\\/\\\/x.com\\\/adexsaas\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/adex.com\\\/blog\\\/#\\\/schema\\\/person\\\/c5794aef7aa28987e7019a804390ee3a\",\"name\":\"Olya Mikheeva\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7e1ca40f4b08b576bd7c51e8946605febbcaa99bf482f69ead517b1cd512de42?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7e1ca40f4b08b576bd7c51e8946605febbcaa99bf482f69ead517b1cd512de42?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7e1ca40f4b08b576bd7c51e8946605febbcaa99bf482f69ead517b1cd512de42?s=96&d=mm&r=g\",\"caption\":\"Olya Mikheeva\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech - ADEX","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/","og_locale":"en_US","og_type":"article","og_title":"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech - ADEX","og_description":"On September 15, 2026, ADEX sponsored the 6th Cyber Security Conference at the Hilton Nicosia. The event ran under the auspices of Cyprus&#8217; Digital Security Authority and was organized by IMH together with the ISACA Cyprus Chapter. ADEX was among the sponsors, alongside Mastercard, Thales and Kyndryl. That line-up is worth a second look: a [&hellip;]","og_url":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/","og_site_name":"ADEX","article_publisher":"https:\/\/www.facebook.com\/adexsaas\/","article_published_time":"2026-10-05T08:13:53+00:00","article_modified_time":"2026-10-05T08:13:54+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/10\/adex-cyber-security-conference.png","type":"image\/png"}],"author":"Olya Mikheeva","twitter_card":"summary_large_image","twitter_creator":"@adexsaas","twitter_site":"@adexsaas","twitter_misc":{"Written by":"Olya Mikheeva","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#article","isPartOf":{"@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/"},"author":{"name":"Olya Mikheeva","@id":"https:\/\/adex.com\/blog\/#\/schema\/person\/c5794aef7aa28987e7019a804390ee3a"},"headline":"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech","datePublished":"2026-10-05T08:13:53+00:00","dateModified":"2026-10-05T08:13:54+00:00","mainEntityOfPage":{"@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/"},"wordCount":888,"publisher":{"@id":"https:\/\/adex.com\/blog\/#organization"},"image":{"@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#primaryimage"},"thumbnailUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/10\/adex-cyber-security-conference.png","articleSection":["Guides"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/","url":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/","name":"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech - ADEX","isPartOf":{"@id":"https:\/\/adex.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#primaryimage"},"image":{"@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#primaryimage"},"thumbnailUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/10\/adex-cyber-security-conference.png","datePublished":"2026-10-05T08:13:53+00:00","dateModified":"2026-10-05T08:13:54+00:00","breadcrumb":{"@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#primaryimage","url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/10\/adex-cyber-security-conference.png","contentUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2026\/10\/adex-cyber-security-conference.png","width":1200,"height":628,"caption":"NIS2 makes you accountable for your suppliers. In adtech that means thousands of domains. Here's why onboarding checks fall short and what to do instead."},{"@type":"BreadcrumbList","@id":"https:\/\/adex.com\/blog\/nis2-supplier-security-adtech\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adex.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Your Supplier List Is Thousands of Domains Long: NIS2 and Brand Safety in Adtech"}]},{"@type":"WebSite","@id":"https:\/\/adex.com\/blog\/#website","url":"https:\/\/adex.com\/blog\/","name":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform","description":"","publisher":{"@id":"https:\/\/adex.com\/blog\/#organization"},"alternateName":"ADEX","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adex.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adex.com\/blog\/#organization","name":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform","url":"https:\/\/adex.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adex.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2022\/05\/CDD2258_copy-48-1.svg","contentUrl":"https:\/\/adex.com\/blog\/wp-content\/uploads\/2022\/05\/CDD2258_copy-48-1.svg","width":148,"height":30,"caption":"ADEX - Ad Fraud & Invalid Traffic Prevention Platform"},"image":{"@id":"https:\/\/adex.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adexsaas\/","https:\/\/x.com\/adexsaas"]},{"@type":"Person","@id":"https:\/\/adex.com\/blog\/#\/schema\/person\/c5794aef7aa28987e7019a804390ee3a","name":"Olya Mikheeva","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7e1ca40f4b08b576bd7c51e8946605febbcaa99bf482f69ead517b1cd512de42?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7e1ca40f4b08b576bd7c51e8946605febbcaa99bf482f69ead517b1cd512de42?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7e1ca40f4b08b576bd7c51e8946605febbcaa99bf482f69ead517b1cd512de42?s=96&d=mm&r=g","caption":"Olya Mikheeva"}}]}},"_links":{"self":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/6222","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/comments?post=6222"}],"version-history":[{"count":8,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/6222\/revisions"}],"predecessor-version":[{"id":6231,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/posts\/6222\/revisions\/6231"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/media\/6228"}],"wp:attachment":[{"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/media?parent=6222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/categories?post=6222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adex.com\/blog\/wp-json\/wp\/v2\/tags?post=6222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}