SAMMY UI is optimized for resolutions with a width 1024px and higher.
NIS2
Browse NIS2
ID.AM: Asset Management
Hardware Inventory
ID.AM-01: Inventories of organization-managed hardware are maintained.
  • 1. An updated inventory of physical equipment (hardware) that comprises information and network systems, including IT, IoT, OT, and mobile devices, approved by internal NIS actors, is maintained.
Requirement Covered
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Inventories of organization-managed hardware are maintained.

Software, Services, and Systems Inventory
ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained.
  • 1. An updated inventory of services, systems, and software applications that comprise the information and network systems is maintained, including commercial, open-source, and custom applications, also accessible via API, approved by internal NIS stakeholders.
Requirement Covered
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Inventories of software, services, and systems managed by the organization are maintained.

Network Communications and Data Flows
ID.AM-03: Representations of network communications, internal and external network data flows authorized by the organization are maintained.
  • 1. An updated inventory of network flows between the information and network systems of the NIS subject and the external environment, approved by internal NIS stakeholders, is maintained.
Requirement Covered
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Representations of network communications, internal and external network data flows authorized by the organization are maintained.

Supplier Services Inventory
ID.AM-04: Inventories of services provided by suppliers are maintained.
  • 1. An updated inventory of IT services provided by suppliers, including cloud services, is maintained.
Requirement Covered
Not Applicable - Not applicable
No - The requirement(s) have not been meaningfully implemented.
Partial - Not all requirement(s) have been meaningfully implemented.
Yes - There is an organization-wide approach to managing cybersecurity risks that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
Description

Inventories of services provided by suppliers are maintained.