# Can a network map be generated automatically from traffic for an auditor?

Yes, for the segments you monitor, and it is often more accurate than a drawn diagram. A map built from observed traffic shows which devices exist, the names they announce and who talks to whom, including connections nobody documented, such as a workstation that reaches a server it should not or a supplier's remote session. It does not show what never sends traffic, segments without a sensor, or the intended design, so keep your architecture diagram and use the observed map to check it. On every plan, NetSenX builds such a network map from monitored traffic, with each device's first and last seen. Before showing it to an outside auditor, consider what it reveals: device names can contain employees' names and the map describes your internal structure, so share it on screen or under a non-disclosure agreement.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/can-a-network-map-be-generated-automatically-for-an-auditor

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [Must we document data breaches that we decide not to report?](https://netsenx.com/en/faq/must-we-document-data-breaches-we-do-not-report)
- [When must we tell the affected people about a data breach?](https://netsenx.com/en/faq/when-must-we-tell-affected-people-about-a-data-breach)
- [When does the NIS2 24-hour clock start?](https://netsenx.com/en/faq/when-does-the-nis2-24-hour-clock-start)
- [What has to be in a NIS2 early warning?](https://netsenx.com/en/faq/what-has-to-be-in-a-nis2-early-warning)
- [Is the final report due one month after the incident?](https://netsenx.com/en/faq/is-the-final-report-due-one-month-after-the-incident)