Do DORA and NIS2 expect us to assess supplier incidents?

Both expect organizations to manage risk from their ICT suppliers and to handle serious incidents promptly, which in practice means knowing quickly whether a supplier's incident affects your services. A dated record of each check helps. This supports compliance work and isn't legal advice.