A study of the Gothenburg tramways system with a focus on crisis preparedness and risk management: Ensuring compliance with NIS2 and CER directives through procurement and supplier relationships

Abstract

This thesis examines how the City of Gothenburg’s tramway procurement and sup plier relationships can be organized to ensure compliance with the EU’s NIS2 and CER directives. Using a qualitative case study approach with semi-structured in terviews of key municipal and supplier stakeholders, the study identifies gaps in awareness, governance, supplier readiness, contract design, and leadership engage ment. Findings indicate that effective implementation requires formal governance structures, role-specific training, procurement criteria aligned with criticality levels, flexible contractual clauses, clear information classification, and sustained leader ship. The study proposes actionable recommendations and outlines opportunities for future research, including longitudinal effects, SME-adaptability, and frameworks for sensitive data protection.