Trust and security at CTEKS
Built to protect your business and earn your trust. Here is how we operate, how we protect access to customer systems and the practices we use internally.
Certificates of insurance on request
Certificates of insurance and applicable coverage information can be provided to qualified customers or prospects upon request.
Platforms we use or support
Using a platform is not the same as holding a certification or partner designation from its maker. We do not claim formal partner status unless it can be documented. CTEKS does not force every customer into one technology stack. We maintain a proven managed services and cybersecurity toolset while also supporting and integrating technologies already deployed in your environment. Your final technology stack is determined by your infrastructure, security requirements, licensing, compliance requirements, selected services and service level agreement. Where it makes sense we standardize and consolidate, and we do not unnecessarily replace good technology you already have. Not every technology listed on this site is included in every CTEKS plan.
Practical controls, applied consistently
Least privilege access
CTEKS uses and/or recommends limiting access to customer environments by job responsibility and operational need, with administrative privileges separated from everyday user accounts wherever practical.
Multi factor authentication
CTEKS uses and/or recommends MFA for administrative access where supported, and helps customers adopt strong authentication based on their requirements.
Privileged account controls
Where applicable, controls may include dedicated administrative accounts, role based access, Microsoft Entra ID privileged access controls, break glass accounts, removal of unnecessary local admin rights, Windows LAPS and regular access reviews.
Secure remote management
Managed endpoints are administered through centralized RMM and security platforms rather than uncontrolled direct access.
Encryption
We use and recommend encryption for supported cloud services, endpoints, backups and data in transit.
Customer data separation
Where practical, customer environments, credentials, documentation and administrative access are managed separately to reduce cross customer exposure.
Access removal
When access is no longer needed, accounts, administrative roles, sessions, tokens and credentials are revoked or rotated as appropriate.
Controls we use and recommend
CTEKS uses and/or recommends the following controls, where applicable, to reduce risk to both our company and our customers.
- Multi factor authentication
- Conditional Access
- Endpoint detection and response
- Centrally managed endpoint security
- Security monitoring
- Email security and anti phishing protection
- Device and patch management
- Least privilege access
- Separate administrative accounts
- Privileged access controls
- Backup protection
- Security awareness training
- Access reviews
- Credential management practices
- Incident response procedures
- Business continuity and disaster recovery planning
These describe controls CTEKS uses and/or recommends. They are not deployed identically in every environment. Specific controls vary by customer requirements, service plan and scope, and are confirmed in your agreement or on request.
How managed systems are secured
Endpoint management
RMM, patching, inventory, monitoring and remote administration.
Endpoint security
EDR/XDR, behavioral detection, threat investigation and containment capabilities.
Email security
Anti phishing, malicious attachment protection, impersonation detection and email threat monitoring.
Security operations
Security alert monitoring, investigation and escalation, depending on your security package and SLA.
Learn moreIdentity security
MFA, Conditional Access, privileged access controls and identity protection.
Structured patch management
CTEKS uses centralized management tools to help maintain supported operating systems and applications through structured patch management processes.
- Operating system security updates
- Application updates
- Device health monitoring
- Failed patch identification
- Controlled reboot policies
- Manual review of higher risk feature and driver updates
- Security remediation as required
Backup is only useful if recovery works
CTEKS helps customers implement and monitor backup and recovery solutions appropriate to their environments. Where included in the service agreement, practices may include the following.
- Managed backup monitoring
- Cloud and SaaS backup
- Server and workstation backup
- Recovery validation
- Disaster recovery planning
- Periodic recovery testing, based on client requirements
- Business continuity planning
Awareness, vendors and incidents
Security awareness
Technology alone cannot eliminate cybersecurity risk. CTEKS can provide or coordinate security awareness training, phishing education, MFA adoption and password guidance.
Vendor and third party security
CTEKS relies on established technology providers for certain managed services. Vendors are selected for capability, security, reliability, support and suitability for your environment. We may use our standard stack or work with your existing security platforms where appropriate.
Incident handling
When a significant security event is identified, CTEKS follows an escalation and response process based on severity, available telemetry, deployed tools, customer requirements and the applicable SLA.
Learn moreYour information stays your information
Customer information is accessed only as necessary to provide contracted services, support, security, administration and troubleshooting.
- Access is limited to authorized personnel
- Administrative access is controlled
- Credentials are handled through approved systems and procedures
- Customer data is not sold
- Confidential information is treated as confidential
- Access is removed when no longer required
Confidentiality and non disclosure agreements are available where required.
Supporting your compliance requirements
CTEKS can help customers implement technology and security controls that support requirements associated with frameworks and regulations such as HIPAA, PCI DSS, cyber insurance requirements and other industry specific standards.
Compliance remains a shared organizational responsibility and may require legal, regulatory, operational and third party assessment beyond managed IT services.
Documentation available upon request
Qualified customers and prospects may request applicable documentation.
- Certificate of insurance
- Security questionnaires
- Vendor information
- Service descriptions
- Data handling information
- Business continuity information
- Security control summaries
- Certifications or partner documentation, where applicable
Common questions
Is CTEKS HIPAA or PCI compliant?
Compliance is a shared responsibility. We help you implement controls that support these requirements, but we do not guarantee compliance on our own.
Can I get a certificate of insurance?
Certificates of insurance and applicable coverage information can be provided to qualified customers or prospects upon request.
Do you sell customer data?
No. Customer data is not sold.
Trust your technology to a team that takes security seriously
Have questions about how CTEKS protects your organization? Our team can review our practices with your IT, compliance, insurance or executive team.
- 1Tell us about your setupTakes about 2 minutes
- 2We review your environmentA short call if we need details
- 3You get a written quotePlans start at $80, $120 and $175 per user/month. See plans
“Efficient, fast and knowledgeable. I would definitely recommend them if you are looking for a new IT company!” Violet G.
Send us the details
Prefer to pick a time? Pick a time for a 30 minute Microsoft Teams discovery call. No obligation.
