# What should the board ask before buying a security tool?

Which risk it reduces, who will use it, and what it will not do. Ask the vendor and your IT team: which problem on our risk list does this address; who reads its output and when, including at night; how long until it is useful; what is the full yearly cost, including staff time; what data does it collect, where is that data stored and under which contract; and how do we leave and take our data with us. Ask for the limits in writing: a vendor that says what its product does not see is easier to trust. Prefer a trial on your own network to a slide deck. NetSenX has a Free plan with no time limit, publishes its prices and states plainly what a network sensor cannot see.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [For the board and finance](https://netsenx.com/en/faq/board) · https://netsenx.com/en/faq/what-should-the-board-ask-before-buying-a-security-tool

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/blog/2026-10-09_cybersecurity-for-the-board
- https://netsenx.com/en/pricing

## Related questions

- [What cyber security questions should a finance director ask?](https://netsenx.com/en/faq/what-cyber-security-questions-should-a-finance-director-ask)
- [How often should the board discuss cyber security?](https://netsenx.com/en/faq/how-often-should-the-board-discuss-cyber-security)
- [How do we check a key supplier before giving it access to our systems?](https://netsenx.com/en/faq/how-do-we-check-a-key-supplier-before-giving-it-access)
- [How do I answer the board when they ask if we have been hacked?](https://netsenx.com/en/faq/how-do-i-answer-the-board-when-asked-if-we-have-been-hacked)
- [Can any tool prove that a company is not hacked?](https://netsenx.com/en/faq/can-any-tool-prove-that-a-company-is-not-hacked)