Frequently Asked Question

Treat the issue as urgent when you see an active account takeover, ransomware note, unexpected money transfer, lost device containing sensitive data, repeated unexpected MFA prompts, or a security outage blocking essential work. Disconnect the affected device from the network when compromise is suspected and open a Security Incident request from a separate trusted device.