SIS-licensed ISO clauses and controls·an add-on inside the AI clients and agents you already use
    Sector · Energy

    Energy & utilities

    Grid and generation compliance, anchored on the NIS2 duties that land on essential entities.

    Ansvar is a gateway for the AI assistant your team already uses — Claude, Microsoft Copilot, any MCP client. Connect it, and every answer below comes back cited to the provision or marked unresolved.

    Art. 21NIS2 essential-entity measures
    Multi-jxnational energy statute, GREEN
    Freethe EU regulations, every tier

    Energy compliance grounded in the regulations that bite — NIS2 essential-entity obligations, the Critical Entities Resilience Directive, and the EU cyber stack at article level — alongside national energy statute across the audited GREEN jurisdictions. Run the NIS2 gap analysis or an OT threat model on grid, generation and SCADA estates.

    what we cover

    The law and standards we ground on

    Law

    National energy statutes

    audited GREEN jurisdictions (e.g. SE Ellagen, DE EnWG, GB Electricity Act 1989 + Utilities Act 2000, NO energiloven)

    Regulation

    NIS2 (Dir (EU) 2022/2555)

    essential-entity security measures (Art. 21) & supervision

    Regulation

    Critical Entities Resilience Directive (EU) 2022/2557

    energy as a designated critical-entity sector

    Regulation

    Cybersecurity Act (EUCC) · Cyber Solidarity Act

    GuidancePremium

    Energy case law · preparatory works · agency guidance

    what you can do

    Workflows that turn it into evidence

    NIS2 gap analysis

    Directive (EU) 2022/2555 Art. 21 for energy essential and important entities — the page spine

    OT / ICS threat model

    STRIDE zones-and-conduits for grid, generation, substation and SCADA systems

    assembledPremium

    OT / ICS TARA

    for operational-technology assets — an available analysis, never a legally-assured verdict

    Effective-risk CVE rescoring

    reprioritise OT/ICS vulnerabilities with NVD / CISA KEV / EPSS context — never exploit code

    Critical Entities Resilience & regulatory gap analysis

    CER (EU) 2022/2557 and broader regimes

    assembledTeam

    Adversary tabletop & enterprise risk assessment

    critical-infrastructure incident readiness (ISO 31000 / NIST 800-30)

    STRIDE threat-model workflows run on every plan against a system you describe — 1 run a month on Free, 2 on Solo, 5 on Premium, which also adds the LINDDUN and TARA families, the rendered reports, and case law inside the run. Document-grounded workflows run on Team and Company. Every tier runs the same corpora as cited research inside your own AI client.

    Questions buyers ask first

    Do you cover the EU electricity and gas market directives?
    The corpus covers the cyber and resilience stack at article level — NIS2, CER, the Cybersecurity Act and Cyber Solidarity Act — plus national energy statute. The EU electricity and gas market directives are not in the corpus, and neither yet is the Network Code on Cybersecurity (Reg (EU) 2024/1366) — it is on the ingestion roadmap. We will not imply coverage we cannot ground.
    Which national energy laws are covered?
    National energy statute is covered for the audited GREEN jurisdictions — Sweden's Ellagen, Germany's EnWG, the GB Electricity Act 1989 and Utilities Act 2000, Norway's energiloven and others on /coverage. These are statutes, not a separate energy-regulator decision corpus.

    Run it against your own systems

    Connect the AI client you already use and ask your first cited question — Free, Solo, Premium and Team are self-serve.

    Building energy compliance? It works today — we take on a few design partners per sector to tune it to your team.