Free, open source, no signup
NIS2 Asset Inventory in 5 minutes, with a shareable link
BSI-200-2 §8.1 Strukturanalyse, five-layer Informationsverbund. NIS2 Art 21(2)(i), BSIG §30(2) Nr. 9. Your data lives in the URL fragment only; the server never sees it.
Inventory ready? Run the risk assessment on each asset. Open the risk assessment →
Which NIS2 sectors apply to your company?
Pick all that apply. Sector-specific assets will appear in the checklist (PLCs, vehicles, medical devices, etc.).
Annex I (essential entities)
High-criticality. Proactive BSI supervision, fines up to €10M.
Annex II (important entities)
Other critical sectors. Reactive supervision, fines up to €7M.
Asset inventory aligned with BSI-200-2 §8.1 Strukturanalyse (five-layer Informationsverbund + Gruppenbildung per Lektion 3). Output is a first-pass inventory you can hand to a consultant or feed into the risk assessment. Full §8.1 conformance also requires a current Netzplan (network diagram), dependency edges between layers, and management body sign-off (§38 BSIG, Art 20 NIS2). Inventory state lives in the URL fragment only; the server never receives it.