Website maintenance for infrastructure businesses
Your client asks about security. We explain our part.
Clients in water, energy and transport projects may ask about supplier security. ResaHost maintains your website and provides information about our service to support your response.
Security questions alongside the project
A client may ask where your website services run, who maintains them and how incidents are reported. Gathering answers takes time when domains, hosting and email have separate suppliers.
ResaHost brings the agreed services into one contract. We define the maintenance scope and provide information about our part of your website operations.
Why might NIS2 appear in a project contract?
NIS2 does not automatically cover every infrastructure contractor. A public project or work on critical infrastructure alone does not settle scope. Assess your activities, size and applicable national rules.
A covered client may assess the security of its direct suppliers and include security requirements in the project contract. .
Source: European Commission: NIS2 Directive.
What information can ResaHost provide?
We explain the maintained services, backup arrangements and incident contact route. Send the client's questionnaire and we will address the sections about our service.
WordPress updates, backups, TLS certificates and email protection are included within the agreed scope. Premium includes a security report four times a year. This describes the service, not the whole company's NIS2 compliance.
Other project systems need their own owners
Project platforms, site networks, equipment access and client-system permissions are outside ordinary website maintenance. Record their suppliers, access controls and incident procedures separately.
A water utility's website and its control system are different services. Our agreement covers only the tasks we accept. Obtain other systems' details from their maintainers.
Agree incident communication in advance
If a client needs prompt incident information, agree the timing and channel beforehand. Regulatory notification deadlines are different from a provider's support response. .
Pro and Premium have a 24-hour first-response commitment. On-call cover, shorter notifications and recovery objectives need separate assessment against your client's requirements.
Frequently asked questions
Does a public infrastructure project make us a NIS2 entity?
Not automatically. Scope depends on activities, size and applicable national rules. A client may also set contractual security requirements.
Does hosting satisfy the client's whole security annex?
No. It covers agreed website services. Other systems, staff practices and business risk management need separate attention.
Can we send you the client's questionnaire?
Yes. We review the sections relating to ResaHost and agree what we can provide and what needs input from other owners.
Let’s talk about your website
Discuss your client's requirements
Send your website address and tell us what needs attention. We will propose a maintenance plan.