# How do we show an auditor which parts of our network are monitored?

With a simple coverage statement backed by evidence, including the gaps. List each site and network segment, whether a sensor or agent watches it, since when, and what it covers; then mark what is not watched, such as guest Wi-Fi, a branch office or a cloud environment, and how you handle it instead. Attach evidence: the sensor list, a recent alert from each monitored segment, and the network map. Auditors trust an honest statement with known gaps more than a claim of full coverage that falls apart on the first question. In NetSenX, one agent on a switch's mirror port (SPAN) or a network TAP watches a whole segment, and the dashboard shows which agents run where; traffic on a segment you do not mirror stays out of view, and NetSenX does not pretend otherwise.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Incident reporting deadlines](https://netsenx.com/en/faq/reporting) · https://netsenx.com/en/faq/how-do-we-show-an-auditor-which-parts-of-the-network-are-monitored

## Read next

- https://netsenx.com/en/nis2-incident-reporting-deadlines
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [What does network detection miss if a segment is not mirrored?](https://netsenx.com/en/faq/what-does-network-detection-miss-if-a-segment-is-not-mirrored)
- [What should an incident log contain for a NIS2 audit?](https://netsenx.com/en/faq/what-should-an-incident-log-contain-for-a-nis2-audit)
- [How do we show an auditor what we decided on each security alert?](https://netsenx.com/en/faq/how-do-we-show-an-auditor-what-we-decided-on-each-alert)
- [How long must we keep security incident records?](https://netsenx.com/en/faq/how-long-must-we-keep-security-incident-records)
- [Can a network map be generated automatically from traffic for an auditor?](https://netsenx.com/en/faq/can-a-network-map-be-generated-automatically-for-an-auditor)