Ransomware Solutions Services
Crypto-Ransomware Settlement Negotiation Consulting
Progent's Ransomware Settlement Negotiation Consulting in Calgary
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated activity that calls for a combination of field experience, IT knowledge and business acumen. It also calls for working closely with the victim's IT team and the insurance carrier, if there is one. Since the number one priority of the ransomware target is fast recovery, it is vital to establish response groups that work efficiently, in parallel, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to supplement your IT support team and restore your network rapidly and economically.
Services provided by Progent's ransomware negotiation experts include:
- Determining the type of ransomware involved in the assault
- Identifying and contacting the hacker
- Evaluating the likelihood of recovery
- Validating the threat actor's decryption capabilities
- Determining a settlement payment with the ransomware victim and the cyber insurance carrier
- Establishing a settlement and timeline with the threat actor
- Confirming accordance with anti-money laundering (AML) sanctions
- Overseeing the crypto-currency payment to the hacker
- Receiving, reviewing, and using the threat actor's decryptor utility
- If necessary, contacting the threat actor for technical assistance with the decryption utility
- Quarantining infected endpoints to prevent further spread of the attack
- Creating replicas of each infected device and data store to allow forensics in parallel with cleanup
- Installing anti-virus agents to all virus-free endpoints
- Restoring files from air-gapped backups or uncompromised machines
- Building a pristine recovery environment
- Mapping and reconnecting drives to reflect precisely their pre-attack state
Settling Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern variants of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often try to exfiltrate files. Hackers are then able to require an extra ransom in exchange for not publishing this data on the dark web. Unfortunately, there is no way to prove that exfiltrated data have been totally deleted by the threat actor. Actually, in many instances the hacker has limited say over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of legal counsel, conducting an audit on which data were stolen, and sending the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.
Progent's Background
Progent has delivered online and onsite IT services throughout the U.S. for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned high-level certifications in foundation technology platforms including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP applications. This scope of skills gives Progent the ability to salvage and consolidate the undamaged parts of your IT environment after a ransomware assault and reconstruct them quickly into an operational network. Progent has collaborated with top cyber insurance providers like Chubb to help businesses clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Expertise in Calgary
To get in touch with Progent about ransomware settlement negotiation services in Calgary, call Progent at
Select Topic: