A regulation can be activated and assessed without an asset and without a
scan. NIS-2 is the quickest way in.
Activate the regulation
Open ISMS › Compliance › Regulations and click the NIS-2 tile under
Available Regulations. It then appears under Active Regulations; a further click
opens its detail page with the objective tree.
Assess the first objective
Click an assessable objective in the tree. The assessment editor opens as a
sidebar: set Applicability to Applicable or Not applicable and enter
the Justification it requires. If the objective is applicable, also choose
the Implementation Status.
An objective with no decision shows Not Assessed first. That state
disappears for good with the first saved decision — a decision, once made, can only
be changed, not reverted.
If an objective’s short label does not say enough, expand the full regulation
text in the Description block.
The quickest way into a freshly activated regulation: use bulk editing to
mark everything that does not concern your organization as Not applicable
in one pass. Details are in
Activate and Assess Regulations.
Further regulations, bulk-editing several objectives, and linking controls are
covered in Activate and Assess Regulations. When an
objective counts as complete or as a gap is explained in
Understanding Compliance. Recording
evidence for a control is covered in
Documenting Evidence for Controls.