Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Phoenix
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated exercise that requires a combination of real-word experience, IT skills and business savvy. It also demands working closely with the ransomware victim's IT staff and the cyber insurance carrier, if any. Since the top goal of the ransomware target is operational continuity, it is critical to establish recovery groups that work effectively, in parallel, and with intimate collaboration. Progent has the breadth of technical knowledge and the depth of personnel to supplement your network staff and restore your network quickly and affordably.

Services provided by Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the attack
• Making contact with the hacker persona
• Evaluating the recovery risk
• Validating the threat actor's decryption capabilities
• Deciding on an acceptable settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement amount and schedule with the TA
• Confirming adherence to anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Receiving, learning, and using the TA's decryption mechanism
• If needed, contacting the threat actor for assistance with the decryptor utility

• Isolating infected endpoints and data stores to prevent further progress of the attack
• Making digital copies of every breached device and data store to allow forensics in parallel with cleanup
• Adding anti-virus protection to all virus-free endpoints
• Recovering files from offline backups or uncompromised machines
• Creating a pristine environment
• Mapping and connecting datastores to match precisely their pre-encryption state

Settling Exfiltration Ransoms
Beyond demanding money for a decryption utility, current variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate files. Hackers can then require an extra payment in exchange for not publishing this data on the dark web. Sadly, there is no method to prove that stolen data have been totally erased by the threat actor. Actually, in many cases the hacker has limited control about who can access the stolen files. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of legal counsel, conducting an audit on which data were compromised, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and on-premises network services throughout the U.S. for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP software. This breadth of skills allows Progent to salvage and consolidate the undamaged pieces of your information system after a ransomware attack and reconstruct them quickly into a functioning network. Progent has collaborated with leading cyber insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Phoenix
To get in touch with Progent about ransomware settlement negotiation guidance in Phoenix, call Progent at 800-462-8800 or go to Contact Progent.