What NIS2 and DORA ask of a marketing website and its vendors
Most marketing sites are out of scope of NIS2 and DORA on their own. The duty arrives through the client: supply chain security under Article 21, mandatory contract clauses under Article 30, and a reporting clock.