Do security ratings comply with NIS2 or DORA requirements?

No. Security ratings can contribute evidence to NIS2 or DORA supplier-risk programmes. Compliance still requires broader risk management, governance, monitoring and evidence around relevant suppliers and dependencies.