What do we do with a security alert at night when nobody is on call?

Decide the rule in advance, because a small company rarely has a night shift. Write down which alerts justify waking someone, who that person is and what they may do alone: for example, isolate one workstation, but not shut down the ERP server. Everything else waits until morning, with a check at a fixed time. If you outsource monitoring, agree the same rules with the provider in writing. Make the first steps simple enough for a non-specialist: disconnect the device from the network, note the time, call the named number. Test the call chain once. NetSenX sends alerts with a plain-language reason and the hosts involved, so the person woken up can tell quickly whether it is a backup job or a workstation calling a new outside server in the small hours. It does not staff a night shift for you.

← All 60 questions on Incident responseAll topics