Who is liable if a monitored client is breached?
It depends mainly on your contract and on what you promised and did, so the answer is a legal one for each case; this is general information, not legal advice. In practice, disputes turn on a few questions: what the contract said you would monitor and when, whether you did it, whether alerts were raised and acted on, and whether the client followed your recommendations. Clear service descriptions, written recommendations the client declined, and a record of alerts and actions protect both sides. Check your professional liability and cyber insurance, and have contracts reviewed by a lawyer. NetSenX keeps alerts with timestamps and an audit log of decisions in each client's tenant, which is the record such questions need.
Read next
Related questions
- What should an MSP do if a client refuses to pay for security?
- When my customer falls under NIS2, does the MSP fall under it too?
- What is in a NIS2 supplier questionnaire, and how do I answer it?
- What NIS2 evidence can an MSP give its clients every quarter?
- How can an MSP give clients incident evidence quickly?