Outsourced CISO
In-house or outsourced CISO: which to choose?
Complete comparison table on 8 criteria to make the best decision based on your context.
Criterion
In-house CISO
Outsourced CISO
Winner
Total cost (SME/mid-cap)
€130k - €180k / year (loaded salary)
Custom subscription, all-inclusive
Start-up time
3 to 9 months (recruitment)
Within 15 days
Depth of expertise
Single-sector
Multi-sector, cross-cutting view
Availability
Limited (1 person)
Shared team, on-call possible
On-site proximity
Strong, daily presence
Shared time (1 to 8 days/month)
Internal culture knowledge
Very strong
Acquired in 2-3 months
NIS 2 / DORA / ISO compliance
Depends on individual experience
Proven methodology and applied frameworks
Departure / turnover risk
High (shortage, salaries +++)
Continuity ensured by the firm
Choose outsourcing if...
- • You are an SME/mid-cap without a CISO in place
- • You need to comply with NIS2/DORA quickly
- • Your cyber budget is constrained
- • You need multi-sector expertise
Prefer an in-house CISO if...
- • You are a large critical-operator group
- • Your IS perimeter is very large and complex
- • You handle ultra-sensitive data continuously
- • You can attract and retain a senior profile
Notre approche
Une méthodologie éprouvée, alignée sur les référentiels
Nous appliquons les standards reconnus (ISO 27001, EBIOS RM, NIST CSF, ANSSI) et adaptons notre accompagnement à vos enjeux sectoriels : banque, assurance, santé, industrie, services, public.
Un expert dédié
Votre interlocuteur unique, présent à chaque COPIL et disponible en cas de crise.
Méthodologie cadrée
Livrables standardisés, planning explicite, points réguliers — vous savez où vous en êtes.
Sectoriel adapté
Banque, santé, industrie, public : on adapte les mesures à vos obligations spécifiques.
Disponibilité
Assistance réactive, gestion de crise, accompagnement lors des contrôles des autorités.
Référentiels appliqués dans nos missions
ISO 27001 ISO 27005 EBIOS RM NIST CSF ANSSI NIS 2 DORA TIBER-EU / TLPT