NIS2

NIS2 starts with knowing your assets

NIS2 has applied in Sweden since 15 January 2026. It requires you to manage your assets, control access and notify significant incidents within 24 hours. vScope gives you an up-to-date inventory of everything in your IT environment – automatically, with history and ready-made reports.

  • 100% on-prem
  • Your data stays in your network
  • Agentless discovery
Securitas logo
Bergman och Beving logo
Thule Group logo
Systemair logo
Nibe logo
Postnord logo

What NIS2 requires of your IT

NIS2 is an EU directive that applies in Sweden through the Cybersecurity Act (2025:1506). Organisations in critical sectors, municipalities and regions must register with the Swedish Civil Defence Agency (MCF) and take appropriate security measures. Many of them depend on knowing your assets: servers, clients, networks, cloud, software, accounts and licences.

Asset management and access control. Know what you have and who can reach it.

Incident handling. Notify within 24 hours, report within 72 hours, final report within one month.

Management responsibility. Management needs a basis to follow up the measures.

Without an up-to-date picture, these are hard to meet – and hard to prove. A CMDB that keeps itself accurate gives you that picture.

Popular Features

  • Complete & continuous discovery
  • Accounts and access per person
  • Dependencies between systems and services
  • Full history for audits

"– We now have a full overview of our IT in a single view."

Photo of Lars Leonardsson

Lars Leonardsson

IT Manager, Deloitte AB

"– We have suffered from not having a single source of truth for our assets."

Photo of John Palmqvist

John Palmqvist

IT Manager, Hässleholm Municipality

Asset Discovery

Asset management

An up-to-date inventory of your assets

vScope automatically inventories servers, clients, networks, cloud services and accounts. All information is gathered in one shared register that is updated daily – so you know which assets you have and can follow how the environment changes.

  • Agentless Discovery – on-prem and in the cloud
  • Over 70 asset types
  • Relations between assets, services and owners

People

Access control

See who has access to what

Get a complete picture of each person's accounts, devices and connected services. See which accounts are active, when they were last used, and spot accounts that are no longer needed.

  • One consolidated profile per person
  • Accounts from different systems linked together
  • Account status and last activity

PERSON

Erik Lindberg

Overview

Full Name
Erik Lindberg
Phone Numbers
+46 70 000 12 34
+46 73 000 56 78
Last Activity
20/10/2026, 11:03:28

User Accounts (3)

⌕  Search
NameFound ByLast LogonActive
Google Workspace2026-10-15 20:36:05true
Azure RM2026-10-20 11:03:28true
Cisco Duo—true

Devices (2)

⌕  Search
IdentifierOperating SystemLast Found Date
Windows 112026-10-20 11:27:36
iOS2026-10-20 11:27:36

Assigned Licenses (4)

⌕  Search
IdentifierExpiry Date
2026-11-12 12:59:26
2027-10-18 02:00:00
—
—

Relations

Incident handling

See which systems and services are affected

During an incident you need to quickly understand which systems and services may be affected. With vScope you get a complete picture of dependencies, owners and services – valuable input for incident handling and reporting.

  • Dependencies between systems and services
  • Owner and SLA per service
  • Input for incident reporting

Compliance

Management responsibility

Follow up and document your security work

vScope checks your IT environment daily and helps you detect deviations and security risks. With history, reports and dashboards you can follow progress and show how you work with the NIS2 requirements.

  • Automatic checks and deviations
  • History and traceability
  • Ready-made reports and dashboards
Name OS OS Version IPv4 Intune Primary User

Common Questions

Are we covered by NIS2?

The law applies to organisations in a large number of sectors, for example energy, transport, health, drinking water and digital infrastructure, as well as municipalities and regions. MCF provides guidance on who is covered and how to register.

What does the law require regarding assets?

The security measures must include policies for access control and asset management. In practice, you need to know which systems, devices and accounts you have, who is responsible for them and how they connect – which is what a CMDB gives you.

How vScope works as a CMDB →

How quickly must incidents be reported?

A significant incident must be notified no later than 24 hours after you become aware of it. This is followed by an incident report within 72 hours and a final report within one month.

Get control of your assets for NIS2

Book a demo and we'll show how vScope gives you an up-to-date inventory of all assets – using your own environment as the example.

Recent blog posts

All posts