# Should the board get cyber security reports from IT or from outside?

Both, for different purposes. Internal reports from IT or the security owner give the regular picture: metrics, open issues and decisions needed. An independent view, from an auditor, a penetration test or an outside adviser, checks every year or two that the internal picture is accurate. Relying only on internal reports means the people responsible mark their own homework; relying only on outside reports leaves long gaps between snapshots. Ask both to use the same few metrics, so their findings can be compared. Where possible, let the board see raw evidence as well, such as an alert report, not only slides. NetSenX reports come from your own network traffic, so they can support either kind of review, but they cover only what its sensors watch.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [For the board and finance](https://netsenx.com/en/faq/board) · https://netsenx.com/en/faq/should-the-board-get-cyber-reports-from-it-or-from-outside

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/blog/2026-10-09_cybersecurity-for-the-board
- https://netsenx.com/en/pricing

## Related questions

- [How do we know our IT provider is doing a good job on security?](https://netsenx.com/en/faq/how-do-we-know-our-it-provider-is-doing-a-good-job-on-security)
- [Who should sign off answers to customer security questionnaires?](https://netsenx.com/en/faq/who-should-sign-off-answers-to-customer-security-questionnaires)
- [How do we explain a cyber incident to customers and the press?](https://netsenx.com/en/faq/how-do-we-explain-a-cyber-incident-to-customers-and-the-press)
- [Should we tell employees about a cyber incident?](https://netsenx.com/en/faq/should-we-tell-employees-about-a-cyber-incident)
- [What is a tabletop exercise, and should the board take part?](https://netsenx.com/en/faq/what-is-a-tabletop-exercise-and-should-the-board-take-part)