Do you cover the EU electricity and gas market directives?

The corpus covers the cyber and resilience stack at article level — NIS2, CER, the Cybersecurity Act and Cyber Solidarity Act — plus national energy statute. The EU electricity and gas market directives are not in the corpus, and neither yet is the Network Code on Cybersecurity (Reg (EU) 2024/1366) — it is on the ingestion roadmap. We will not imply coverage we cannot ground.

Which national energy laws are covered?

National energy statute is covered for the audited GREEN jurisdictions — Sweden's Ellagen, Germany's EnWG, the GB Electricity Act 1989 and Utilities Act 2000, Norway's energiloven and others on /coverage. Since 2026 the regulators' own decisions, grid codes and network regulations are served as a second layer for GB, DE, NO, SE, FI, DK and NL, and US federal energy regulation covers FERC (18 CFR) and the NRC nuclear rules (10 CFR).

Sector · Energy

Energy & utilities

Grid and generation compliance, anchored on the NIS2 duties that land on essential entities.

Ansvar is a gateway for the AI assistant your team already uses — Claude, Microsoft Copilot, any MCP client. Connect it, and every answer below comes back cited to the provision or marked unresolved.

See full coverage

Art. 21NIS2 essential-entity measures

EU · USnational statute + FERC / NRC

C2M2356 maturity practices, MIL1-MIL3

Energy compliance grounded in the regulations that bite — NIS2 essential-entity obligations, the Critical Entities Resilience Directive, and the EU cyber stack at article level — alongside national energy statute across the audited GREEN jurisdictions and the national regulators' decisions, grid codes and network regulations for seven of them. US federal energy regulation is served too: FERC (18 CFR) and the NRC nuclear rules (10 CFR). The DOE C2M2 maturity model and the CISA cross-sector performance goals give the programme a scored spine. Run the NIS2 gap analysis or an OT threat model on grid, generation and SCADA estates.

what we cover

The law and standards we ground on

Law

National energy statutes

audited GREEN jurisdictions (e.g. SE Ellagen, DE EnWG, GB Electricity Act 1989 + Utilities Act 2000, NO energiloven)

Regulation

National energy-regulator decisions, grid codes and network regulations

GB, DE, NO, SE, FI, DK and NL, attributed per row to the regulator that issued them

Regulation

US federal energy regulation — FERC (18 CFR) and the NRC nuclear rules (10 CFR)

served verbatim from the eCFR

Law

Dutch radiation-protection and nuclear-safety regulation (ANVS)

Regulation

NIS2 (Dir (EU) 2022/2555)

essential-entity security measures (Art. 21) & supervision

Regulation

Critical Entities Resilience Directive (EU) 2022/2557

energy as a designated critical-entity sector

Regulation

Cybersecurity Act (EUCC) · Cyber Solidarity Act

Standard

DOE C2M2 v2.1

356 maturity practices across ten domains, each tagged MIL1-MIL3, served verbatim — the de-facto energy-sector maturity model

Standard

CISA Cross-Sector Cybersecurity Performance Goals v2.0

the baseline critical-infrastructure control spine, water and wastewater included, crosswalked to NIST CSF 2.0 / 800-53 / 800-82r3 — served verbatim

GuidancePremium

Energy case law · preparatory works · agency guidance

what you can do

Workflows that turn it into evidence

Team

NIS2 gap analysis

Directive (EU) 2022/2555 Art. 21 for energy essential and important entities — the page spine

Premium

OT / ICS threat model

STRIDE zones-and-conduits for grid, generation, substation and SCADA systems

assembledPremium

OT / ICS TARA

for operational-technology assets — an available analysis, never a legally-assured verdict

Team

Effective-risk CVE rescoring

reprioritise OT/ICS vulnerabilities with NVD / CISA KEV / EPSS context — never exploit code

assembledTeam

C2M2 maturity-scored gap analysis

the DOE C2M2 practices at MIL1-MIL3 over your OT programme, with the CISA performance goals as the cross-sector baseline — assembled from the served practice text and the gap-analysis workflow

Team

Critical Entities Resilience & regulatory gap analysis

CER (EU) 2022/2557 and broader regimes

assembledTeam

Adversary tabletop & enterprise risk assessment

critical-infrastructure incident readiness (ISO 31000 / NIST 800-30)

STRIDE threat-model workflows run on every plan against a system you describe — 1 run a month on Free, 2 on Solo, 5 on Premium, which also adds the LINDDUN and TARA families, the rendered reports, and case law inside the run. Document-grounded workflows run on Team and Company. Every tier runs the same corpora as cited research inside your own AI client.

Questions buyers ask first

Do you cover the EU electricity and gas market directives?: The corpus covers the cyber and resilience stack at article level — NIS2, CER, the Cybersecurity Act and Cyber Solidarity Act — plus national energy statute. The EU electricity and gas market directives are not in the corpus, and neither yet is the Network Code on Cybersecurity (Reg (EU) 2024/1366) — it is on the ingestion roadmap. We will not imply coverage we cannot ground.
Which national energy laws are covered?: National energy statute is covered for the audited GREEN jurisdictions — Sweden's Ellagen, Germany's EnWG, the GB Electricity Act 1989 and Utilities Act 2000, Norway's energiloven and others on /coverage. Since 2026 the regulators' own decisions, grid codes and network regulations are served as a second layer for GB, DE, NO, SE, FI, DK and NL, and US federal energy regulation covers FERC (18 CFR) and the NRC nuclear rules (10 CFR).

Run it against your own systems

Connect the AI client you already use and ask your first cited question — Free, Solo, Premium and Team are self-serve.

Setup guide

Building energy compliance? It works today — we take on a few design partners per sector to tune it to your team.