# What should a monitoring contract say if our insurer asks about a SOC or response times?

It should state who watches, when, how fast they respond and what they are allowed to do. A security operations centre (SOC) is a team that monitors security alerts and responds to them, either in-house or bought as a service. When insurers ask about one, they look for a few concrete points: hours of coverage, including nights and weekends; a response time for urgent alerts, written as a service level agreement (SLA); which systems and data sources are covered; the actions the provider may take without asking, such as isolating a device or disabling an account; how and when you are informed; and what happens during the provider’s own outages. Make sure the scope in the contract matches the scope you declare, since a SOC that only sees your firewall does not cover your laptops. NetSenX can be one of the data sources such a team uses, with alerts sent to Slack or a webhook from the Pro plan and SIEM export from the Business plan. NetSenX does not sell SOC services.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Cyber insurance](https://netsenx.com/en/faq/insurance) · https://netsenx.com/en/faq/do-insurers-ask-for-a-soc-contract-or-monitoring-sla

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/nis2-network-monitoring

## Related questions

- [What does an insurer mean when it asks whether we monitor our network?](https://netsenx.com/en/faq/what-does-an-insurer-mean-by-network-monitoring)
- [What proof of network monitoring can we show an insurer?](https://netsenx.com/en/faq/what-proof-of-network-monitoring-do-insurers-accept)
- [Can we use NetSenX reports as evidence for our cyber insurer?](https://netsenx.com/en/faq/can-we-use-netsenx-reports-as-evidence-for-our-insurer)
- [Can network detection lower our cyber insurance premium?](https://netsenx.com/en/faq/can-network-detection-lower-our-cyber-insurance-premium)
- [Does directors and officers insurance cover NIS2 fines or management liability?](https://netsenx.com/en/faq/do-nis2-fines-for-managers-fall-under-d-and-o-insurance)