Skip to main content
A regulation can be activated and assessed without an asset and without a scan. NIS-2 is the quickest way in.

Activate the regulation

Open ISMS › Compliance › Regulations and click the NIS-2 tile under Available Regulations. It then appears under Active Regulations; a further click opens its detail page with the objective tree.

Assess the first objective

Click an assessable objective in the tree. The assessment editor opens as a sidebar: set Applicability to Applicable or Not applicable and enter the Justification it requires. If the objective is applicable, also choose the Implementation Status.
An objective with no decision shows Not Assessed first. That state disappears for good with the first saved decision — a decision, once made, can only be changed, not reverted.
If an objective’s short label does not say enough, expand the full regulation text in the Description block.
The quickest way into a freshly activated regulation: use bulk editing to mark everything that does not concern your organization as Not applicable in one pass. Details are in Activate and Assess Regulations.
Further regulations, bulk-editing several objectives, and linking controls are covered in Activate and Assess Regulations. When an objective counts as complete or as a gap is explained in Understanding Compliance. Recording evidence for a control is covered in Documenting Evidence for Controls.