Skip to main content
A regulation can be activated and assessed without an asset and without a scan. NIS-2 is the quickest way in.

Activate the regulation

Open ISMS › Compliance › Regulations and click the NIS-2 tile under Available Regulations. It then appears under Active Regulations; a further click opens its detail page with the objective tree.

Assess the first objective

Click an assessable objective in the tree. Its detail page opens as a tab of its own. In the Overview tab, set Applicability to Applicable or Not applicable; with Not applicable, a Justification is required. If the objective is applicable, also choose the Implementation Status.
An objective with no decision shows Not Assessed first. That state disappears for good with the first saved decision—a decision, once made, can only be changed, not reverted.
If an objective’s short label does not say enough, the full text is in the Description section at the end of the Overview tab.
The quickest way into a freshly activated regulation: use bulk editing to mark everything that does not concern your organization as Not applicable in one pass. Details are in Activate and Assess Regulations.
Further regulations and bulk-editing several objectives are covered in Activate and Assess Regulations, linking controls in Objectives. When an objective counts as complete or as a gap is explained in Understanding Compliance. Recording evidence for a control is covered in Documenting Evidence for Controls.