SAMMY works best on screens 1024px wide or larger.
NIS2
Browse NIS2
ID.AM: Asset Management
ID.AM-01: Inventories of organization-managed hardware are maintained.
  • 1. An updated inventory of physical equipment (hardware) that comprises information and network systems, including IT, IoT, OT, and mobile devices, approved by internal NIS actors, is maintained.
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Inventories of organization-managed hardware are maintained.

ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained.
  • 1. An updated inventory of services, systems, and software applications that comprise the information and network systems is maintained, including commercial, open-source, and custom applications, also accessible via API, approved by internal NIS stakeholders.
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Inventories of software, services, and systems managed by the organization are maintained.

ID.AM-03: Representations of network communications, internal and external network data flows authorized by the organization are maintained.
  • 1. An updated inventory of network flows between the information and network systems of the NIS subject and the external environment, approved by internal NIS stakeholders, is maintained.
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Representations of network communications, internal and external network data flows authorized by the organization are maintained.

ID.AM-04: Inventories of services provided by suppliers are maintained.
  • 1. An updated inventory of IT services provided by suppliers, including cloud services, is maintained.
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Inventories of services provided by suppliers are maintained.