Farron by Montagne Security
Menu

Farron by Montagne Security

From contract to control.

Farron turns Dutch and European cyber obligations into contract requirements, then gives you a clear, clause-by-clause view of what each supplier agreement covers, where attention is needed, and what to do next.

See Farron Explore the control graph
  • Clause-level evidence
  • Expert-reviewed
  • Runs in your environment

Illustrative finding

Supplier notification window

FR-024

Timing gap Review recommended

Supplier agreement · clause 12.4

“The Supplier shall notify the Customer without undue delay and in any case within 72 hours of becoming aware of an incident.”
Your early-warning window
24 hours
Supplier notification window
72 hours

The current wording may leave less time than your own early-warning duty allows. Farron brings that gap into view before it becomes an incident-response problem.

  1. 01 Contract clause
  2. 02 Cbw duty
  3. 03 Reviewed finding

Why contracts

Certificates describe the supplier. Contracts define what you can rely on.

From 15 August 2026, organisations in scope of the Cyberbeveiligingswet must manage cyber risk and their boards must oversee the measures taken. Supplier agreements decide whether reporting windows, evidence rights and exit duties can be enforced when it matters.

Farron connects the service you actually bought to the obligations written into the agreement, so legal, procurement, and security teams work from the same position.

Nothing is green without a source.

  1. 48%

    of breaches in Verizon's 2026 dataset involved a third party.

    Source · Verizon 2026 DBIR

  2. 15 Aug 2026

    the Cyberbeveiligingswet and Wwke enter into force in the Netherlands.

    Source · Rijksoverheid

  3. Board duty

    boards approve cyber-risk measures and supervise their implementation.

    Source · NCSC

The Farron control graph

See what the contract gives you control over.

Select a NIS2 control. Farron traces its third-party requirements to the clauses that support them and brings missing or ambiguous coverage into view.

Framework view NIS2
Illustrative agreement MSA-2026-014

Select a control to reveal its contract path

Supplier agreement MSA 2026-014
Covered Partial Gap

Nothing is marked covered without a traceable clause.

Illustrative data · Final assessments remain reviewable and versioned.

The Farron method

From legal duty to contract evidence.

Clause-level evidence for the contracts you run today, the ones you negotiate next, and the supplier landscape you are accountable for.

  1. Scope

    Establish whether the Cbw applies, why it applies, and which requirements follow for your organisation and the service under review.

    Output · Scope note

  2. Trace

    Match each requirement to the exact clause, omission or contradiction in the supplier agreement. The evidence and reasoning stay together.

    Output · Clause map

  3. Resolve

    Turn gaps in deadlines, scope, evidence, access and exit duties into concrete contract requirements for procurement and legal teams.

    Output · Negotiation position

  4. Govern

    See coverage across the supplier portfolio and identify which agreements need attention when a rule, service or contract changes.

    Output · Portfolio view

A position you can rely on

Clear contract control, backed by evidence.

Every conclusion explained. Every finding connected to its source.

  1. Traceable

    Every finding points to the requirement, clause, and reasoning behind it.

  2. Reproducible

    Versioned inputs make each assessment repeatable and defensible.

  3. Expert-reviewed

    A Montagne Security specialist reviews the assessment before it becomes a finding.

  4. Kept in your environment

    Contracts and assessment data remain inside the infrastructure you control.

In the field · 2026

Contract analysis is live in active pilots with NIS2-scope organisations.

The work starts with the agreements organisations already rely on, so the outcome connects directly to procurement, security, and governance.

A closer look

See Farron move from contract to control.

We will walk you through the control graph using an illustrative supplier agreement and show how every requirement, clause, and finding stays connected.

See Farron Contact the founders