Skip to content
  • There are no suggestions because the search field is empty.

Understanding AI Use, Certifications and Risk Classification

Some fields in asset documentation are designed for advanced compliance topics, such as AI usage, certifications and risk classification.

AI and Data Use

  • Whether the system uses AI
  • Whether there’s an AI-related risk
  • If your company’s data is used to train the model

asset-ai-step

Certifications

Mark if the system (or vendor) holds relevant certifications:

  • ISO 27001
  • ISAE 3402
  • SOC 2

asset-certification

You can link directly to documents or notes.

Risk Classification

Mark an asset as critical when the services you deliver depend on it. Marking an asset as critical does not add it to your NIS2 risk assessment automatically. Instead:

  1. Go to Assets and filter the list on critical assets.
  2. Go through the list and mark the assets that belong in your NIS2 risk assessment.

You can also mark which security Measures are implemented vs. planned.


Related Articles