Is network monitoring expected in investor due diligence?

Increasingly yes, but as a question rather than a fixed requirement. Technical due diligence asks how you would notice an intrusion, and “we would hear it from a customer” is a weak answer. Investors are usually less interested in the product name than in whether alerts reach someone, whether that person acts, and whether there is a record of it. A monitored network with an alert history and documented decisions answers the question; an unused tool does not. If you start monitoring shortly before a round, say so: a short history stated honestly is better than an implied long one. NetSenX's Free plan has no time limit, so you can start building a record well before due diligence begins and move to a paid plan when you need longer history or reports.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

← All 40 questions on For the board and financeAll topics