Understanding AI Use, Certifications and Risk Classification
Some fields in asset documentation are designed for advanced compliance topics, such as AI usage, certifications and risk classification.
AI and Data Use
- Whether the system uses AI
- Whether there’s an AI-related risk
- If your company’s data is used to train the model
Certifications
Mark if the system (or vendor) holds relevant certifications:
- ISO 27001
- ISAE 3402
- SOC 2

You can link directly to documents or notes.
Risk Classification
Mark an asset as critical when the services you deliver depend on it. Marking an asset as critical does not add it to your NIS2 risk assessment automatically. Instead:
- Go to Assets and filter the list on critical assets.
- Go through the list and mark the assets that belong in your NIS2 risk assessment.
You can also mark which security Measures are implemented vs. planned.
