Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Alpharetta
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that calls for a mix of real-word experience, technical skills and business savvy. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is operational continuity, it is critical to deploy recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of personnel to complement your network staff and recover your network rapidly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the threat actor's decryption tool
• Budgeting a settlement with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the TA
• Confirming adherence to anti-money laundering sanctions
• Managing the crypto-currency payment to the hacker
• Receiving, learning, and operating the hacker's decryption mechanism
• If necessary, contacting the hacker for technical help with the decryption tool

• Quarantining infected endpoints to prevent further progress of the attack
• Making digital copies of each infected server and endpoint and data store in order to perform forensics without interfering with recovery
• Adding anti-virus agents to all virus-free endpoints
• Recovering data from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. TAs are then able to demand an additional settlement in exchange for not posting this information on the dark web. Sadly, there exists no way to guarantee that stolen files have been totally erased by the hacker. Actually, in numerous instances the hacker has little control about data custody. Settling an exfiltration ransom does not free you from the need for getting the guidance of legal counsel, conducting an audit on which data were taken, and carrying out the required notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and on-premises network services throughout the United States for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded advanced certifications in foundation technologies such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning software. This breadth of skills allows Progent to salvage and consolidate the undamaged pieces of your network after a ransomware intrusion and rebuild them rapidly into an operational system. Progent has collaborated with leading cyber insurance carriers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Alpharetta
To get in touch with Progent about crypto-ransomware settlement negotiation services in Alpharetta, phone Progent at 800-462-8800 or go to Contact Progent.