Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Bristol
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that calls for a mix of field experience, technical skills and business acumen. It also calls for close co-operation with the cyber-extortion target's IT team and the insurance provider, if there is one. Since the number one goal of the ransomware target is operational continuity, it is vital to establish recovery groups that work effectively, concurrently, and in close communication. Progent has the breadth of technical knowledge and the depth of experts to supplement your network support team and restore your network environment quickly and affordably.

Services provided by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware involved in the attack
• Making contact with the hacker
• Assessing the recovery risk
• Validating the TA's decryption tool
• Deciding on an acceptable settlement payment with the victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Checking accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the TA
• Receiving, reviewing, and using the hacker's decryption mechanism
• If necessary, contacting the hacker for technical help with the decryption utility

• Isolating infected endpoints to arrest the spread of the attack
• Creating replicas of each infected server and endpoint and data store to allow forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring data from air-gapped backups or unscathed endpoints
• Building a clean environment
• Mapping and reconnecting datastores to match exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to exfiltrate information. TAs can then demand an extra settlement in exchange for not posting this data on the dark web. Sadly, there exists no method to prove that exfiltrated data have been completely deleted by the TA. Actually, in numerous instances the TA has little control over where the information ends up. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy attorneys, conducting an inventory of files were stolen, and sending the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This broad array of skills allows Progent to identify and integrate the surviving pieces of your information system after a ransomware assault and rebuild them quickly into a functioning system. Progent has collaborated with leading insurance carriers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Bristol
To get in touch with Progent about ransomware settlement expertise in Bristol, phone Progent at 800-462-8800 or go to Contact Progent.