# Can we start by monitoring only our most critical systems?

Yes, and it is a sensible way to begin, as long as you write down what is not covered yet. Choose the systems whose compromise would hurt most: the file server, the finance and ERP servers, the backup system, the domain controller, and the link to the internet. Mirror the switch ports those systems use, or install the agent directly on them. You will see who connects to them, which is often where an intrusion shows first. Then expand segment by segment. Be honest in any report to management, an insurer or a customer: monitoring the servers is not monitoring the whole network. The NetSenX Free plan covers 3 devices, which is enough to start with your most critical systems.

FAQ: [Small business monitoring](https://netsenx.com/en/faq/smb) · https://netsenx.com/en/faq/can-we-start-by-monitoring-only-our-most-critical-systems

## Read next

- https://netsenx.com/en/ndr-for-small-business
- https://netsenx.com/en/pricing

## Related questions

- [What does baselining mean, and how long does it take?](https://netsenx.com/en/faq/what-does-baselining-mean-and-how-long-does-it-take)
- [What should a small company do when a security alert arrives?](https://netsenx.com/en/faq/what-should-a-small-company-do-when-a-security-alert-arrives)
- [Who watches the security alerts at night and at weekends?](https://netsenx.com/en/faq/who-watches-security-alerts-at-night-and-at-weekends)
- [Who watches our network when the IT administrator is on holiday?](https://netsenx.com/en/faq/who-watches-the-network-when-the-it-administrator-is-on-holiday)
- [Who gets the alert if something happens on the network over Christmas?](https://netsenx.com/en/faq/who-gets-the-alert-if-something-happens-over-christmas)