# What NIS2 evidence can an MSP give its clients every quarter?

A short, dated pack that shows the measures ran: what was monitored, which alerts were raised and how they were handled, incidents and their reporting deadlines, backup and restore tests, patch status, access reviews and open risks. NIS2 asks entities in scope for risk-management measures and incident handling; evidence that these happen regularly is what their management body and auditors look for. Keep the format the same each quarter so changes stand out, and include what is not covered. NetSenX supplies the monitoring part: alerts with timestamps and explanations, the audit log, NIS2 Article 23 deadlines tracked per incident, and PDF reports from the Starter plan. It does not decide what is reportable or submit reports.

FAQ: [MSPs and MSSPs](https://netsenx.com/en/faq/msp) · https://netsenx.com/en/faq/what-nis2-evidence-can-an-msp-give-clients-every-quarter

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/partners

## Related questions

- [How can an MSP give clients incident evidence quickly?](https://netsenx.com/en/faq/how-can-an-msp-give-clients-incident-evidence-quickly)
- [Does an EU MSP need an EU-hosted security vendor for its clients?](https://netsenx.com/en/faq/does-an-eu-msp-need-an-eu-hosted-security-vendor)
- [How can an MSP show clients which AI tools their staff use?](https://netsenx.com/en/faq/how-can-an-msp-show-clients-which-ai-tools-their-staff-use)
- [Can an MSP offer OT monitoring to small manufacturers?](https://netsenx.com/en/faq/can-an-msp-offer-ot-monitoring-to-small-manufacturers)
- [What does an MSP need to monitor a client's PLCs passively?](https://netsenx.com/en/faq/what-does-an-msp-need-to-monitor-a-clients-plcs-passively)