Hardware maintenance for companies subject to NIS2 and KRITIS
Short answer
Companies subject to NIS2 or the German KRITIS rules need a hardware maintenance provider that makes maintenance provable: contractual SLAs up to 24×7×4, original spare parts with documented origin, defined escalation and reporting paths, and documentation for NIS2 supply-chain risk management. TechCare Solutions is such a provider: vendor-independent maintenance for 28 manufacturers, headquartered in Germany, contract under German law, with audit documentation for NIS2, KRITIS, DORA, BAIT/MaRisk, ISO 27001 and TISAX.
What NIS2 and KRITIS mean for hardware maintenance
The NIS2 directive (EU 2022/2555) requires operators in many sectors to take risk-management measures under Article 21. These include business continuity, incident handling and explicitly supply-chain security, which covers the service providers that maintain critical systems.
For hardware this means: it must be provable which systems are under maintenance, which response and recovery times apply, and how the provider is selected and monitored. None of the regulations prescribes whether the manufacturer or a third party maintains the hardware.
What a maintenance provider for critical infrastructure should offer
- SLA up to 24×7×4 with contractually defined response and recovery times
- Original spare parts, proof of origin and chain of custody on request
- Spare-parts depot in Germany so the 4-hour on-site commitment holds
- Documented escalation and incident processes that fit your reporting paths
- Media handling as required (drives stay with the customer or are destroyed with a certificate)
- Contract under German law, data processing in Germany or the EU
- Maintenance for systems past end of service life, so the critical estate has no gaps
Audit documentation TechCare provides
For every contract, TechCare Solutions provides an install-base list with maintenance status and SLA per system, documents spare-parts supply, escalation paths and incident handling. Compliance documentation for NIS2, DORA, BAIT/MaRisk, ISO 27001 and TISAX is part of the standard contract.
- 28 manufacturers in one contract (including HPE, Dell EMC, Cisco, NetApp, IBM, Fujitsu, Lenovo, Juniper, Huawei, Hitachi, Pure Storage)
- SLA tiers up to 24×7×4: engineer and original spare part on site within 4 hours
- 30–70 % below the OEM maintenance list price, including after end of service life (EOSL)
- Original spare parts from our own DACH depot, chain of custody on request
- Headquartered in Hahnstätten, Germany, German- and English-speaking support, contract under German law
- Fixed-price quote within 48 hours after the install-base review