You don't need to explain how Diri works to your AI assistant. When it starts, it reads where you are working, what your organisation holds, your active frameworks and Diri's working method. For common tasks, Diri gives it a step-by-step method of its own, and you can write to it in Norwegian or English.
Start a conversation with a plain request. Some examples:
- "Where am I working in Diri, and what does this organisation hold?"
- "Which of our ISO 27001 controls have no evidence yet?"
- "Let's do a risk assessment of our payroll system. Interview me."
The AI asks about the system, what can go wrong, causes, consequences and existing measures, and builds a bow-tie risk assessment with treatments. You review the package and publish it, then continue in Diri's bow-tie work surface. Attach system documentation or an earlier assessment to give it more to work with.
- "Here is our risk assessment for the customer portal from last year (attached). Bring it into Diri."
The AI converts the spreadsheet or document into Diri's structure, reusing the threats, vulnerabilities, assets and treatments you already have where they match.
- "Which treatments is Kari responsible for, and which are overdue?"
- "The MFA rollout is done and backups are tested. Update the treatments."
- "Go through the gaps in our NIS2 framework and propose evidence from what we already have in Diri."
- "Here is our new access control policy (attached). Which controls does it satisfy?"
- "Here is the latest export of IT systems from our architecture tool (attached). Update the IT systems register: add new ones and update the ones we have."
Existing records are recognised by name, so the AI keeps names exactly as they are. See Bulk import for how matching works.
- "Review our threats and vulnerabilities for duplicates and inconsistencies."
- "Which IT systems have no owner?"
The AI proposes fixes as a package or files suggestions for you to decide on. See Reviewing what your AI proposes.
- Check where it works. The AI works in the organisation and module you have open in Diri. If you switch organisation, tell the AI so it checks again.
- Read what it found. After sending a package, the AI tells you what Diri found: what is new, what changes and what is held back. Read it before you publish.
- Ask it to explain. If a proposal surprises you, ask why. The AI can show the records it based it on.
- It says "sent", not "done". Something is in Diri only once a person has published it under Import & AI.