What to change
Compare the monitor's response with an authorised ordinary visitor request before declaring a public outage. Ask the host to identify the relevant security rule and the monitoring service's documented request behaviour. A narrowly scoped approved adjustment may be appropriate, but retain protection against unwanted traffic. Also consider whether the check's method realistically represents the public task. Preserve the distinction between monitor accessibility and visitor availability in incident reporting.
A worked example
Illustrative example
Illustrative test: The authorised probe succeeds while the intended security protections remain effective.
How to check the result
The monitoring result and its access assumptions are documented.
A mistake to avoid
Disabling the whole firewall to silence one alert creates unnecessary exposure.
Your action checklist
Use these checks to prepare a discussion with your team or supplier. Tick a check when you have recorded the decision or evidence, rather than when a feature has simply been promised.
Entries stay in this page and are not submitted to Kay & Co. Download your notes before leaving; the page does not save them.
Further reading
These primary sources provide additional context for the project decisions above.
Related decisions
Turn the brief into a working service
Kay & Co. can help you scope the work, design the experience and deliver the right solution for your organisation.
Explore support & operations services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.