# How should a small company keep security records?

Keep a few records consistently rather than many records occasionally: what you have, what you changed, what happened and what you did. A device and account list with owners. A change log for important systems. Backup and restore-test dates. A simple incident log with date, what was seen, decisions and who made them. Store them where an attacker who gets into one computer cannot delete them, and make sure every device has the correct time, because timelines depend on it. These records answer the questions of insurers, auditors, customers and, under NIS2, authorities. NetSenX keeps part of this for you: alerts with timestamps and explanations, alert history per plan, and an audit log of decisions and changes on every plan.

FAQ: [Small business monitoring](https://netsenx.com/en/faq/smb) · https://netsenx.com/en/faq/how-to-keep-security-records-in-a-small-company

## Read next

- https://netsenx.com/en/ndr-for-small-business
- https://netsenx.com/en/pricing

## Related questions

- [Does a small business need NDR?](https://netsenx.com/en/faq/does-a-small-business-need-ndr)
- [What is the minimum security a small business needs?](https://netsenx.com/en/faq/minimum-security-for-a-small-business)
- [What network security monitoring should a small business use?](https://netsenx.com/en/faq/what-network-security-monitoring-should-a-small-business-use)
- [Is network monitoring useful if everything we use is in the cloud?](https://netsenx.com/en/faq/is-network-monitoring-useful-if-everything-is-in-the-cloud)
- [How do I monitor a network on a budget?](https://netsenx.com/en/faq/how-to-monitor-a-network-on-a-budget)