# What should an MSP tell a client after a security alert?

Tell them what happened, what it means for them, what you did, and what they need to do or decide, in plain words and without drama. Name the device and the time, say whether it was harmless, suspicious or an incident, and what evidence supports that. If you contained something, say how and whether anything is still affected. If the client must decide, for example to disconnect a server or inform staff, say so clearly and by when. If personal data or NIS2 reporting may be involved, point it out early, because deadlines can start at awareness. Keep a written record. NetSenX alerts give you the explanation to pass on, and the audit log keeps what was done.

FAQ: [MSPs and MSSPs](https://netsenx.com/en/faq/msp) · https://netsenx.com/en/faq/what-should-an-msp-tell-a-client-after-a-security-alert

## Read next

- https://netsenx.com/en/problems-we-solve
- https://netsenx.com/en/partners

## Related questions

- [My MSP client got hacked. What do I do first?](https://netsenx.com/en/faq/my-msp-client-got-hacked-what-do-i-do-first)
- [Can an attacker pivot from a client network into the MSP's tools?](https://netsenx.com/en/faq/can-an-attacker-pivot-from-a-client-into-the-msps-tools)
- [How do we detect misuse of our RMM tool in client networks?](https://netsenx.com/en/faq/how-to-detect-misuse-of-an-rmm-tool-in-client-networks)
- [What should an MSP monitor to detect a compromise of its own tools?](https://netsenx.com/en/faq/what-should-an-msp-monitor-to-detect-a-compromise-of-its-own-tools)
- [How can an MSP add night and weekend coverage for clients without hiring?](https://netsenx.com/en/faq/how-can-an-msp-add-night-and-weekend-coverage-without-hiring)