Suntech Systems
Contact
Back to services
Information security and cybersecurity

Information Security & Cyber Incident Response

Professional cyber incident response with a focused approach and fair pricing.

Responding to compromised accounts, suspicious activity on computers and email systems, and network intrusions, alongside stronger protection and preparation for what comes next.

Practical support for companies, from investigating an incident to addressing the gaps found, tailored to their systems and operational needs.

When an incident starts, clear priorities matter

An account sends messages nobody wrote, a computer shows unusual activity or a system stops working. The priorities are to establish what is known, what still needs investigation and what requires action now. Not every alert indicates a breach, and incidents vary in the response they require.

The response combines hands-on infrastructure and information security experience with focused investigation: identifying information that affects decisions, reducing exposure and coordinating the work with the company.

A response built around the findings

  1. Investigation and assessment of the incident's scope. Reviewing accounts, email, workstations and relevant information, distinguishing facts from suspicions and gaps that need investigation.
  2. Containing the incident and limiting harm. Addressing access and permissions, affected accounts and potentially affected computers, according to the risks and business continuity needs.
  3. Support for restoring operations. Assessing repair and recovery options based on the condition of systems and backups, including during ransomware incidents. Recovery depends on the findings and the sources available.
  4. Closing gaps and hardening systems. Adjusting protections and upgrading security systems, including during an unfolding incident, with changes coordinated around their impact on operations.
  5. Ongoing controls and follow-up. Alerts, coverage checks and follow-up at a level appropriate to the company, with a clear distinction between completed work and remaining tasks.

Security solutions tailored to your company's systems

  • Cyber incident response for user accounts, computers and email systems, including Microsoft 365.
  • Investigating network intrusions and responding to ransomware incidents, coordinating with other specialists when needed.
  • Firewall hardening, including FortiGate, and reviewing vendor permissions and connections.
  • ZTNA solutions, IPsec connections and secure remote access to the office.
  • Securing servers and virtual environments, endpoint protection and update management.
  • Selecting protection and control tools to meet the need, rather than adding products simply because they are available.

Professionalism and fairness, even under pressure

Before expanding the work, the need, expected benefit and cost are explained. The priorities are made clear: what matters now, what can be planned for later and what is not required based on the information available.

The investigation is taken further when it could affect a decision, and stopped when additional work would not add value. Necessary checks are still carried out. Fair pricing, transparency and agreement in advance help keep the response focused on both the company's security and its budget.

What the company receives

A clear picture of findings and actions, priorities for further work, and a distinction between completed work, risks that still need investigation and decisions awaiting approval. There is no blanket guarantee of preventing every incident or recovering data in every situation.

From the field: a cyber incident that started in a mailbox

A cyber incident that began with thousands of messages: containment, focused investigation and broader protection, with care for the company's budget.

3,500 emails in half an hour. And no one at the company sent them.

Further reading