Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Manchester
Progent has experience negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex activity that requires a combination of field experience, IT knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if any. Because the number one priority of the ransomware victim is fast recovery, it is critical to establish recovery teams that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of IT knowledge and the deep bench of experts to complement your network staff and recover your network environment rapidly and affordably.

Services offered by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware involved in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement amount with the victim and the insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying compliance with anti-money laundering laws
• Managing the crypto-currency payment to the TA
• Acquiring, learning, and operating the TA's decryption mechanism
• If needed, contacting the TA for technical assistance with the decryption tool

• Quarantining affected endpoints to arrest the spread of the attack
• Creating replicas of each breached server and endpoint and data store to allow forensics in parallel with restoration
• Adding anti-virus protection to all clean endpoints
• Recovering data from offline backups or unscathed machines
• Creating a clean recovery environment
• Remapping and connecting datastores to match exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly try to steal (or "exfiltrate") information. TAs are then able to demand an additional settlement in exchange for not posting this data or selling it. Unfortunately, there exists no way to be certain that stolen data have been totally deleted by the TA. In fact, in numerous instances the threat actor has limited say about where the information ends up. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, conducting an inventory of data were compromised, and sending the mandated notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services across the U.S. for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in core technology platforms including Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and ERP applications. This broad array of expertise allows Progent to salvage and integrate the undamaged pieces of your network after a ransomware attack and rebuild them quickly into a functioning network. Progent has collaborated with top cyber insurance carriers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Manchester
To get in touch with Progent about ransomware settlement guidance in Manchester, phone Progent at 800-462-8800 or go to Contact Progent.