What Nispo produces and in what format, with no reports built by hand in spreadsheets.
Key facts
- With Nispo you get a dashboard by area, the control register, gaps, remediation, policies, suppliers, inventories and reports for the management body, exportable to PDF and CSV.
- Reports and exports come from the same register data: nothing to re-enter by hand.
- The compliance percentage is an operational indicator, not a legal judgement or a certification.
What you receive
| Output | What it contains | Format |
|---|---|---|
| Compliance dashboard | Status by area (Govern, Identify, Protect, Detect, Respond, Recover), documents, recent activity | Platform |
| Control register | For each requirement: code, area, check type, status, evidence | Platform, export |
| Gaps | Uncovered requirements, with priority and suggested action | Platform, export |
| Remediation | Tasks with owner, due date and closure evidence | Platform, export |
| Policies | Templates, approved versions, review status | Platform, documents |
| Suppliers | Criticality, questionnaire, next deadline | Platform, export |
| Inventories | Hardware, software, services and people, with owners | Platform, export |
| Management report | Compliance status by area | |
| CSIRT Italia bulletins | Alerts and bulletins published by ACN | Platform |
The management report
Legislative Decree 138/2024 requires management bodies to approve the measures and oversee their implementation. The report summarises, for non-technical readers, the status by area, what is open and what needs a decision. It uses the same register as IT, so there is no second document to keep aligned.
The compliance percentage
It is calculated from the status of the controls recorded in Nispo and is useful for following the trend over time. It is not a legal judgement: where a requirement has no evidence, it shows as uncovered. A control’s status follows the latest automated check or, for manual controls, the evidence uploaded by its owner. The screens: product tour.