A regulation can be activated and assessed without an asset and without a
scan. NIS-2 is the quickest way in.
Activate the regulation
Open ISMS › Compliance › Regulations and click the NIS-2 tile under
Available Regulations. It then appears under Active Regulations; a further click
opens its detail page with the objective tree.
Assess the first objective
Click an assessable objective in the tree. Its detail page opens as a tab of
its own. In the Overview tab, set Applicability to Applicable or Not
applicable; with Not applicable, a Justification is required. If the
objective is applicable, also choose the Implementation Status.
An objective with no decision shows Not Assessed first. That state
disappears for good with the first saved decision—a decision, once made, can only
be changed, not reverted.
If an objective’s short label does not say enough, the full text is in the
Description section at the end of the Overview tab.
The quickest way into a freshly activated regulation: use bulk editing to
mark everything that does not concern your organization as Not applicable
in one pass. Details are in
Activate and Assess Regulations.
Further regulations and bulk-editing several objectives are covered in
Activate and Assess Regulations, linking controls in
Objectives. When an
objective counts as complete or as a gap is explained in
Understanding Compliance. Recording
evidence for a control is covered in
Documenting Evidence for Controls.