# Is a single cyber risk score meaningful for a small company?

Rarely. A single score mixes things that cannot be added up, such as missing backups, an unpatched server and an untrained finance team, and its precision is usually false: nobody can defend why the company is a 62 and not a 58. Once a number appears in board minutes, it is quoted for years, and it hides which problem actually moved. A small set of plain facts serves the board better: what is monitored, what is open, what was tested and what is overdue, each with a trend and an owner. If you are given a rating by an insurer or a supplier portal, ask how it is calculated and what it leaves out. NetSenX helps with the network part of those facts: alert and incident counts, and the list of monitored segments.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [For the board and finance](https://netsenx.com/en/faq/board) · https://netsenx.com/en/faq/is-a-single-cyber-risk-score-meaningful

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/blog/2026-10-09_cybersecurity-for-the-board
- https://netsenx.com/en/pricing

## Related questions

- [How do I report network security to the board without jargon?](https://netsenx.com/en/faq/how-do-i-report-network-security-to-the-board-without-jargon)
- [What cyber security evidence do investors ask a small company for?](https://netsenx.com/en/faq/what-cyber-evidence-do-investors-ask-a-small-company-for)
- [Is network monitoring expected in investor due diligence?](https://netsenx.com/en/faq/is-network-monitoring-expected-in-investor-due-diligence)
- [Can a 30-person company show investors it monitors for intrusions?](https://netsenx.com/en/faq/can-a-30-person-company-show-investors-it-monitors-for-intrusions)
- [How should we answer a customer who asks whether we have had a security incident?](https://netsenx.com/en/faq/how-should-we-answer-have-you-had-a-security-incident)