a question is not included in the file can I add it myself
Add an answer yourself to the supply chain file
Yes, you can. The supply chain file is not a fixed questionnaire but a collection of answers that grows with what you put into it. If a question does not appear — for example a detailed question about a specific ISO/IEC 27001 control from Annex A, or about one of the ten measures from article 21(2) of the NIS2 Directive — then you add it as a new answer in the file, together with the supporting document. From that point on, the system recognizes the same question in subsequent lists, even if a different customer formulates it differently.
What is important is that an added answer remains a fact, not an assumption. If you add that the undertaking has a certain control measure, then provide the underlying document: the policy, the certificate, the declaration. Without supporting documentation, the answer appears as an open item, and will not be automatically proposed as "yes" in the next list. This is intentional: the system never proposes an answer for which there is no source in the file. For questions that are close to the EFRAG VSME basic module — think of figures that also appear in the company's annual turnover or the number of employees — it is useful to use the same source that you have already provided for those basic data, so that there are no contradictory figures in the file.
Why a new answer always belongs with a source
This follows from how the file is set up: each answer is linked to a source document, not to free text. For data that is already fixed, such as registration in the business register under the Business Register Act 2007, that link is automatic. For new, more specific answers — such as requirements from Directive (EU) 2022/2464 (CSRD) or from the NIS2 Directive — you establish that link yourself at the moment you add the answer.
This answer applies to every type of questionnaire, not only to the cyber questions from your customer, answer it. The full explanation — with the sources, country-specific details and related topics — is on the hub.
This is not legal advice. This page provides general information on the regulations this platform covers. We do not know your situation. If in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-09-05. Is something incorrect? Let us know — corrections receive priority.