What should an MSP check on a new client's network in the first week?
Who and what is on the network, what is exposed, and whether the basics are in place. Build a device inventory from traffic and from a walk through the office. Check which services are reachable from the internet, such as remote desktop, file shares or old VPNs. List admin accounts and remove shared or former staff accounts. Confirm that backups run and that one copy is offline, and do a restore test. Check that multi-factor authentication is on for e-mail and remote access. Look for remote-access tools left by previous providers. Write down what you found and agree priorities with the client. NetSenX helps with the inventory and shows beaconing, scanning and unusual uploads from the first days.
Read next
Related questions
- How does an MSP get alerted when a client network shows signs of attack?
- Can an MSP receive client alerts in Slack or through a webhook?
- What should an MSP tell a client after a security alert?
- My MSP client got hacked. What do I do first?
- Can an attacker pivot from a client network into the MSP's tools?