NIS2 places explicit responsibility on essential and important entities for the security of their supply chain. This playbook explains how to identify in-scope suppliers, run proportionate risk assessments, set contractual baselines, and maintain ongoing oversight — focused on the realities of aviation supply chains.