NIS2 Article 21(1)(d) requires supply chain security. Continuous monitoring of third-party integrations with audit-grade evidence.