How should a small company keep security records?
Keep a few records consistently rather than many records occasionally: what you have, what you changed, what happened and what you did. A device and account list with owners. A change log for important systems. Backup and restore-test dates. A simple incident log with date, what was seen, decisions and who made them. Store them where an attacker who gets into one computer cannot delete them, and make sure every device has the correct time, because timelines depend on it. These records answer the questions of insurers, auditors, customers and, under NIS2NIS2: the EU's second Network and Information Security directive. The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies., authorities. NetSenX keeps part of this for you: alerts with timestamps and explanations, alert history per plan, and an audit log of decisions and changes on every plan.
Read next
Related questions
Terms used here
- NIS2 (the EU's second Network and Information Security directive)
- The EU cybersecurity law (Directive (EU) 2022/2555) that sets security and incident-reporting duties for many companies.