Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Services in Napa
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated activity that requires a mix of real-word experience, IT skills and business savvy. It also demands close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware target is fast recovery, it is critical to establish response groups that work effectively, in parallel, and in close communication. Progent has the breadth of technical skills and the depth of experts to complement your network staff and restore your network quickly and economically.

Services provided by Progent's ransomware settlement team include:

• Determining the type of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Budgeting a settlement amount with the victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Checking adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency payment to the TA
• Receiving, learning, and using the TA's decryption tool
• If needed, contacting the hacker for assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further spread of the assault
• Making replicas of every breached server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing anti-virus protection to all clean endpoints
• Salvaging files from offline backups or unscathed machines
• Building a pristine recovery environment
• Remapping and reconnecting drives to reflect exactly their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to exfiltrate information. Hackers are then able to demand a separate settlement in exchange for not divulging this information or selling it. Sadly, there exists no way to prove that stolen data have been completely erased by the threat actor. In fact, in many instances the threat actor has little control over data custody. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of privacy attorneys, conducting an audit on which files were stolen, and sending the mandated alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services across the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned high-level certifications in core technology platforms such as Cisco networking, VMware, and major distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning software. This breadth of expertise allows Progent to salvage and integrate the undamaged pieces of your information system after a ransomware attack and rebuild them quickly into a viable system. Progent has worked with leading insurance carriers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Napa
To get in touch with Progent about ransomware settlement guidance in Napa, phone Progent at 800-462-8800 or go to Contact Progent.