Does automated alerting count as 24/7 monitoring for an insurer?
Usually not on its own, because insurers asking about 24/7 monitoring generally mean that a person can respond at any hour. Software that analyses traffic all the time and sends alerts is the first half; the second half is someone who receives the alert at 3 a.m., understands it and can act, for example by disconnecting a device or calling a response firm. Whether a set-up with alerts sent to an on-call phone counts depends on the insurer’s wording, so describe it exactly and ask your broker rather than ticking the box. Write down the response time you can really meet outside office hours and test it once with a deliberate alert. NetSenX provides the first half: continuous analysis on the segments it watches, with alerts in plain language, and from the Pro plan delivery to Slack or a webhook. The second half is your rota, your MSPMSP: managed service provider. A company that runs IT for other companies. or a security operations centre.
General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.
Read next
Related questions
- Can our managed service provider run NetSenX so we can answer yes on 24/7 monitoring?
- What should a monitoring contract say if our insurer asks about a SOC or response times?
- What does an insurer mean when it asks whether we monitor our network?
- What proof of network monitoring can we show an insurer?
- Can we use NetSenX reports as evidence for our cyber insurer?
Terms used here
- MSP (managed service provider)
- A company that runs IT for other companies.