Responsibility matrix
Version 2026-11-10. monsys measures and reports; the customer decides and runs their systems. This matrix makes that explicit per task. D = does it, A = decides and is accountable, I = is informed.
| Task | Customer | monsys |
|---|---|---|
| Install the agent on a system | D, A | provides installation and checks |
| Keep the agent current | A (automatic updates on or off) | D (publishes and rolls out) |
| Setup per system (environment, criticality, owner, backup, patch policy) | D, A | shows what is missing |
| Configure the alert channel and on-call | D, A | provides the channels |
| Detect and report problems | I | D |
| Fix problems on the customer’s systems | D, A | proposes an action |
| Install patches | A | D when automatic patching is on, with a check before and after |
| Emergency actions (for example pausing a container) | A (confirms every action) | D after confirmation, with a signed token |
| Backups of the customer’s systems | D, A | checks they are fresh when the customer points to them |
| Availability and security of monsys itself | I | D, A |
| Users and rights in monsys | D, A | enforces them |
| Retain and delete data as in the data processing agreement | A | D |
| Compliance judgement (NIS2, ISO 27001, …) | A, with the auditor | provides measurements and signed evidence |
monsys measures, the auditor judges.