Think you are under attack? Do not wait.
If you are experiencing or suspect a cybersecurity incident, such as ransomware, suspicious logins, a compromised Microsoft 365 account, unusual network activity, data theft or business email compromise, contact CTEKS for assistance. We begin triage as quickly as possible, based on availability, severity and engagement terms.
Call us now
Tell us what you are seeing. We will tell you what is available for your situation.
Call (847) 200-3666Report a security incidentExisting clients: use the emergency support path in your service agreement.
What to do in the first few minutes
Disconnect
Disconnect obviously compromised devices from the network. Do not wipe or reimage them.
Preserve
Do not delete suspicious emails, files or logs. Keep evidence as it is.
Write it down
Note what you saw, when it started and who was affected.
Call for help
Contact your IT or security team, and your cyber insurance carrier. Many policies require prompt notice.
What we help with
How we work an incident
Exact steps depend on the situation, your environment and your agreement.
Triage
We learn what happened, what is affected and how urgent it is.
Contain
We work to contain affected systems and accounts where we can.
Preserve evidence
We help keep the information needed to understand what occurred.
Find the scope
We identify which accounts, devices and data may be involved.
Secure identities
We review and secure accounts, sessions and administrative access.
Recover and harden
We coordinate recovery and remediation, then recommend improvements to reduce the chance of it happening again.
Clients and new organizations
Existing managed clients
Use the emergency support path defined in your service agreement. Coverage and response depend on your SLA.
Organizations new to CTEKS
Contact us and we will tell you whether we can assist, and on what terms. Availability and engagement terms apply.
Common questions
Do you offer 24/7 emergency response?
Emergency and after hours support depends on your service agreement. Call us and we will tell you what is available for your situation.
Should I turn off the affected computers?
Disconnect them from the network first. Do not wipe or reimage them, and do not delete anything, so evidence is preserved. Then call for help.
Can you help if I am not a client?
Contact us and we will tell you whether we can assist. Availability and engagement terms apply.
Will you notify regulators or involve my lawyer?
That depends on the engagement. If you handle regulated data, contact your attorney and your cyber insurance carrier promptly.
Report a security incident
Tell us what you are seeing and how to reach you. For anything urgent, call (847) 200-3666 first.
- 1Tell us about your setupTakes about 2 minutes
- 2We review your environmentA short call if we need details
- 3You get a written quotePlans start at $80, $120 and $175 per user/month. See plans
“Efficient, fast and knowledgeable. I would definitely recommend them if you are looking for a new IT company!” Violet G.
Send us the details
Prefer to pick a time? Pick a time for a 30 minute Microsoft Teams discovery call. No obligation.
