# What security evidence does a buyer ask for in due diligence?

Usually a short pack of documents and records. It typically includes your security policies, a list of incidents in recent years and how each was handled, the results of penetration tests or audits, any certifications you hold, your cyber insurance, your data processing agreements and a description of how you monitor for intrusions. A buyer prices what you cannot document, through a lower price, an escrow or an indemnity clause, so records count for more than assurances. Start collecting before a sale is on the table: an incident register, the decision taken on each serious alert, and the date monitoring began. NetSenX keeps an alert history and an audit log of your team's decisions on every plan, with PDF reports from the Starter plan; how far back the history goes depends on the plan.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [For the board and finance](https://netsenx.com/en/faq/board) · https://netsenx.com/en/faq/what-security-evidence-does-a-buyer-ask-for-in-due-diligence

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/blog/2026-10-09_cybersecurity-for-the-board
- https://netsenx.com/en/pricing

## Related questions

- [How far back can NetSenX show alerts?](https://netsenx.com/en/faq/how-far-back-can-netsenx-show-alerts)
- [Can we export an incident log for a buyer or investor?](https://netsenx.com/en/faq/can-we-export-an-incident-log-for-a-buyer-or-investor)
- [What cyber metrics should a board see every quarter?](https://netsenx.com/en/faq/what-cyber-metrics-should-a-board-see-every-quarter)
- [Is a single cyber risk score meaningful for a small company?](https://netsenx.com/en/faq/is-a-single-cyber-risk-score-meaningful)
- [How do I report network security to the board without jargon?](https://netsenx.com/en/faq/how-do-i-report-network-security-to-the-board-without-jargon)