NIS 2 in house or with Cyber Console

Many companies start with spreadsheets, shared folders and email. What changes when measures, answers and evidence live in one archive.

In short

You start from what you have already collected: existing documents and evidence are attached to the answers they relate to.

Cyber Console

Makes sense when:

  • Several people contribute answers and evidence and you need to find every version.
  • You must show in an audit or inspection how you applied the measures, with the evidence in its place.
  • You want a list of activities with priorities and deadlines instead of a calendar kept by hand.

Spreadsheets, folders and email

Makes sense when:

  • The scope is small, one person handles everything and the method works.
  • You already have a document system with history and permissions, and a team that maintains it.
  • Your group mandates its own tools and you cannot add others.

Point by point

Comparison checked on 1 October 2026.
Where the answers live Cyber ConsoleIn one archive, measure by measure Spreadsheets, folders and emailSpreadsheets, shared folders and email
History Cyber ConsoleEvery version of the answers stays in the history Spreadsheets, folders and emailVersions in file names, when someone remembers
Evidence Cyber ConsoleAttached to the answer they prove Spreadsheets, folders and emailScattered across folders and mailboxes
Activities Cyber ConsoleThe list of required activities, with priorities and deadlines Spreadsheets, folders and emailA spreadsheet or calendar updated by hand
Progress Cyber ConsoleA compliance score and its trend over time Spreadsheets, folders and emailRebuilt by hand before every meeting
Documents Cyber ConsoleGenerated in PDF and Word when the related activities are complete; the approved version returns to the console with its history Spreadsheets, folders and emailWritten from scratch or adapted from templates, in scattered copies: it is not always clear which is the latest
Incident notification Cyber ConsoleClassification by the NIS 2 taxonomy and the fields ACN requires already filled in, to review and enter on the ACN portal Spreadsheets, folders and emailForms prepared from scratch within 24 and 72 hours
Audits and inspections Cyber ConsoleRead-only access for auditors and inspectors Spreadsheets, folders and emailFolders to prepare and send
ISO 27001 Cyber ConsoleThe same structure for ISO/IEC 27001 Spreadsheets, folders and emailAnother set of spreadsheets and folders
Cost Cyber ConsoleThe Cyber Console subscription Spreadsheets, folders and emailNo licence, but more internal working hours
Flexibility Cyber ConsoleThe framework's structure Spreadsheets, folders and emailAny format and tool

Getting started with Cyber Console

  1. 1

    Access

    Your organisation is set up in Cyber Console, with different roles for those who fill in and those who consult.

  2. 2

    Answers

    You answer the measures, on your own or with the Virtual CISO, attaching the evidence.

  3. 3

    Activities

    The list of activities, with priorities and deadlines, shows what to do next.

  4. 4

    Documents

    Once the activities are complete, the documents are generated in PDF and Word, go to management for approval, and the signed version is archived in the console.

All about Cyber Console

Frequently asked questions

Yes: existing documents and evidence are attached to the answers they relate to, without starting from scratch.

The users of your organisation, with roles that separate those who fill in from those who consult read-only, such as an auditor.

Yes: every document is also available in Word. You adapt it, have it approved by management or the board, and upload the signed version to Cyber Console, which keeps its versions.

No: the notification is an official statement by your company. With the information collected, Cyber Console classifies the incident by the NIS 2 taxonomy and fills in the fields ACN requires; your CSIRT contact reviews them, completes them and enters them on the ACN portal. We guide you through the process and make it faster, to meet tight deadlines such as the 24 hours for the early warning.

Yes: NIS 2 and ISO/IEC 27001 are managed with the same structure of answers, evidence, activities and documents.

No, but the Virtual CISO can run the assessments with you, set the activities to carry out and prepare the documents, which your management approves.

Not sure yet which fits you?

The Cyber Check-up returns your company's cyber profile and the priorities to start from.

Start the Cyber Check-up Cyber Console