A framework can be activated and assessed without an asset and without a
scan. NIS-2 is the quickest way in.
Activate the framework
Open ISMS › Compliance › Frameworks and, under Available Frameworks, click
Activate on the NIS-2 tile. The tile then appears under Active
Frameworks; clicking it opens the detail page with the objective tree.
Assess the first objective
Click an assessable objective in the tree. Its detail page opens as a tab of
its own. In the Overview tab, set Applicability to Applicable or Not
applicable; with Not applicable, a Justification is required. If the
objective is applicable, also choose the Implementation Status.
An objective with no decision shows Not Assessed first. That state
disappears for good with the first saved decision—a decision, once made, can only
be changed, not reverted.
If an objective’s short label does not say enough, the full text is in the
Description section at the end of the Overview tab.
The quickest way into a freshly activated framework: use bulk editing to
mark everything that does not concern your organization as Not applicable
in one pass. Details are in
Activate and Assess Frameworks.
Further frameworks and bulk-editing several objectives are covered in
Activate and Assess Frameworks, linking controls in
Objectives. When an
objective counts as complete or as a gap is explained in
Understanding Compliance. Recording
evidence for a control is covered in
Documenting Evidence for Controls.