---
title: "NIS 2 in house or with Cyber Console: how to choose"
description: "Running NIS 2 on spreadsheets, folders and email or with Cyber Console: answers, history, evidence, activities, documents and audits compared."
canonical: https://www.aegister.com/en/solutions/compare/nis2-in-house-vs-cyber-console/
url: /en/solutions/compare/nis2-in-house-vs-cyber-console/
lang: en
---

![](https://www.aegister.com/static/images/header.webp)

# NIS 2 in house or with Cyber Console

Many companies start with spreadsheets, shared folders and email. What changes when measures, answers and evidence live in one archive.

## In short

You start from what you have already collected: existing documents and evidence are attached to the answers they relate to.

### Cyber Console

Makes sense when:

- Several people contribute answers and evidence and you need to find every version.
- You must show in an audit or inspection how you applied the measures, with the evidence in its place.
- You want a list of activities with priorities and deadlines instead of a calendar kept by hand.

### Spreadsheets, folders and email

Makes sense when:

- The scope is small, one person handles everything and the method works.
- You already have a document system with history and permissions, and a team that maintains it.
- Your group mandates its own tools and you cannot add others.

## Point by point

Comparison checked on 1 October 2026.

| Criterion | Cyber Console | Spreadsheets, folders and email |
| --- | --- | --- |
| Where the answers live | Cyber ConsoleIn one archive, measure by measure | Spreadsheets, folders and emailSpreadsheets, shared folders and email |
| History | Cyber ConsoleEvery version of the answers stays in the history | Spreadsheets, folders and emailVersions in file names, when someone remembers |
| Evidence | Cyber ConsoleAttached to the answer they prove | Spreadsheets, folders and emailScattered across folders and mailboxes |
| Activities | Cyber ConsoleThe list of required activities, with priorities and deadlines | Spreadsheets, folders and emailA spreadsheet or calendar updated by hand |
| Progress | Cyber ConsoleA compliance score and its trend over time | Spreadsheets, folders and emailRebuilt by hand before every meeting |
| Documents | Cyber ConsoleGenerated in PDF and Word when the related activities are complete; the approved version returns to the console with its history | Spreadsheets, folders and emailWritten from scratch or adapted from templates, in scattered copies: it is not always clear which is the latest |
| Incident notification | Cyber ConsoleClassification by the NIS 2 taxonomy and the fields ACN requires already filled in, to review and enter on the ACN portal | Spreadsheets, folders and emailForms prepared from scratch within 24 and 72 hours |
| Audits and inspections | Cyber ConsoleRead-only access for auditors and inspectors | Spreadsheets, folders and emailFolders to prepare and send |
| ISO 27001 | Cyber ConsoleThe same structure for ISO/IEC 27001 | Spreadsheets, folders and emailAnother set of spreadsheets and folders |
| Cost | Cyber ConsoleThe Cyber Console subscription | Spreadsheets, folders and emailNo licence, but more internal working hours |
| Flexibility | Cyber ConsoleThe framework's structure | Spreadsheets, folders and emailAny format and tool |

## Getting started with Cyber Console

1. 1

   ### Access

   Your organisation is set up in Cyber Console, with different roles for those who fill in and those who consult.
2. 2

   ### Answers

   You answer the measures, on your own or with the Virtual CISO, attaching the evidence.
3. 3

   ### Activities

   The list of activities, with priorities and deadlines, shows what to do next.
4. 4

   ### Documents

   Once the activities are complete, the documents are generated in PDF and Word, go to management for approval, and the signed version is archived in the console.

[All about Cyber Console](https://www.aegister.com/en/solutions/cyber-console/)

## Frequently asked questions

### Can we use the documents we already have?

Yes: existing documents and evidence are attached to the answers they relate to, without starting from scratch.

### Who can see and edit the answers?

The users of your organisation, with roles that separate those who fill in from those who consult read-only, such as an auditor.

### Can we adapt the documents to our organisation?

Yes: every document is also available in Word. You adapt it, have it approved by management or the board, and upload the signed version to Cyber Console, which keeps its versions.

### Does Cyber Console send the notification to the CSIRT?

No: the notification is an official statement by your company. With the information collected, Cyber Console classifies the incident by the NIS 2 taxonomy and fills in the fields ACN requires; your CSIRT contact reviews them, completes them and enters them on the ACN portal. We guide you through the process and make it faster, to meet tight deadlines such as the 24 hours for the early warning.

### Does Cyber Console also cover ISO 27001?

Yes: NIS 2 and ISO/IEC 27001 are managed with the same structure of answers, evidence, activities and documents.

### Do you need a consultant to use it?

No, but the Virtual CISO can run the assessments with you, set the activities to carry out and prepare the documents, which your management approves.

## Other comparisons

[### Virtual CISO or in-house CISO

Virtual CISO and in-house CISO compared: cost, presence, skills, tools and continuity. When one makes more sense than the other.

Full comparison](https://www.aegister.com/en/solutions/compare/virtual-ciso-vs-in-house-ciso/)
[### Cloud Defender or a traditional WAF

Cloud Defender and an in-house WAF compared: activation, maintenance, rules, DDoS, direct access to the server and visibility.

Full comparison](https://www.aegister.com/en/solutions/compare/cloud-defender-vs-traditional-waf/)

## Not sure yet which fits you?

The Cyber Check-up returns your company's cyber profile and the priorities to start from.

[Start the Cyber Check-up](https://www.aegister.com/en/assessment/)
[Cyber Console](https://www.aegister.com/en/solutions/cyber-console/)
