The asset inventory your auditor asks for.
NIS2 expects you to know what IT equipment you have, who uses it and whether it is protected. Nodavio keeps that list for you, and AutoDiscovery keeps it up to date on its own on your Windows machines.
What NIS2 actually asks for.
Article 21 of the NIS2 Directive lists the security measures an organisation in scope must have in place. Four of them are directly about your equipment.
Asset management
Article 21(2)(i). You need to be able to show an inventory of your assets, and it has to be right. ISO 27001 asks the same in control 5.9.
Encryption
Point (h). A laptop without an encrypted disk becomes a data breach the day it is left on a train. You need to know which machines are protected.
Access control and multi-factor
Points (i) and (j). Who has which machine, and who can reach the systems that describe them.
The supply chain
Point (d). If you are not in scope yourself but supply someone who is, you often get the same questions in a questionnaire from that customer.
What Nodavio gives you.
Everything below is in Nodavio today.
One inventory of all your equipment
Computers, servers, monitors, printers and network gear. Each record has an asset tag, serial number, manufacturer and model, department, location, who has it, purchase date, warranty and status: active, in repair, in storage or retired.
About inventoryKept up to date on its own
The AutoDiscovery agent on Windows reports hardware, operating system, installed software and BitLocker status. Mac, Linux and anything without the agent are added by hand or imported from a CSV file.
About AutoDiscoveryEncryption status per machine
Every computer shows whether BitLocker is on, off or unknown. Machines with the agent report it themselves, so you see it when a disk is not encrypted, and the status is included in the export.
Software across the fleet
Everything AutoDiscovery has found installed, with versions and how many computers have it. Nodavio also shows which machines are missing something the rest of their department has.
Traceability
Every computer has its own history of changes, repairs and issues. The activity log shows sign-ins, failed sign-in attempts, changed roles and removed computers: who, what and when.
About historyProof of routine work
Checklists for whole groups of machines and recurring maintenance. When a checklist is finished it is recorded in the computer's history, so you can show the work was done.
About maintenanceExport for your auditor
The whole list as CSV, with asset tag, serial number, model, department, user, location, operating system, BitLocker status, purchase date, warranty and status. Open it in Excel and send it on.
Warranty alerts
Nodavio can email you before a machine's warranty runs out, so a replacement is planned rather than urgent.
Nodavio itself is secured
Two-factor sign-in with recovery codes, and roles so that only admins see the activity log and manage users. Data and backups are held by Simply.com in Denmark, with a second backup copy in Denmark, and there is a data processing agreement.
What Nodavio does not do
Nodavio does not make you NIS2 compliant on its own. It covers your physical IT equipment and the software on it. Risk assessment, policies, incident reporting and management accountability are still yours to handle, ideally with an adviser.
Why it is still where to start
The rest of the work rests on knowing what you have. A risk assessment of equipment you cannot list is a guess. The inventory is the part that otherwise ends up as a spreadsheet nobody keeps current.
Read the guide: what an asset inventory should containQuestions about NIS2 and Nodavio
As a rule, if you are a medium or large company in one of the sectors the directive lists. Medium typically means from 50 employees, or over 10 million euro in both turnover and balance sheet. Smaller companies often get the requirements anyway through their customers. Check with the authority for your sector.
No, and be sceptical of anything that promises to. Nodavio gives you the equipment inventory, encryption status, history and an export with all of it, which is evidence for part of the requirements. The rest is policies and processes that no tool can do for you.
The AutoDiscovery agent is Windows only today. Mac, Linux, printers and network gear still go in the inventory: add them by hand or import them from a CSV file. They just do not update on their own.
With Simply.com A/S in Denmark: the application, database, uploaded files and backups. Nodavio also keeps a second copy of the backups on its own equipment in Denmark. Every subprocessor is listed in the privacy policy.
300 DKK a month covers the first 15 computers, then 20 DKK per computer. No VAT is added, because Nodavio is not VAT-registered. It is billed monthly and can be cancelled at any time. See pricing.
Yes. Download the import template in Nodavio, copy your columns across and import the file. Then install AutoDiscovery on your Windows machines, so hardware and software fill in on their own.
Have the inventory ready before anyone asks for it.
Create your workspace, install AutoDiscovery and watch your machines report in.