Ransomware Response Consulting Experts

Progent's Ransomware Negotiation Consulting in Louisville
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated exercise that requires a mix of field experience, technical knowledge and business savvy. It also demands working closely with the victim's IT staff and the insurance carrier, if any. Because the number one priority of the ransomware target is fast recovery, it is critical to establish response groups that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical knowledge and the depth of personnel to supplement your network staff and restore your network rapidly and economically.

Support offered by Progent's ransomware settlement negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Agreeing on a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Confirming compliance with anti-money laundering (AML) laws
• Managing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the TA's decryptor mechanism
• If needed, contacting the hacker for technical help with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of every infected device and data store to allow forensics in parallel with recovery
• Installing A/V agents to all clean endpoints
• Restoring data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Remapping and connecting datastores to match precisely their pre-encryption condition

Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate files. Hackers can then demand an extra settlement in exchange for not divulging this data on the dark web. Unfortunately, there exists no method to guarantee that exfiltrated files have been completely erased by the threat actor. In fact, in numerous cases the threat actor has little control about data custody. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy lawyers, conducting an audit on which data were compromised, and carrying out the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services across the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning applications. This breadth of expertise allows Progent to salvage and consolidate the surviving parts of your information system following a ransomware assault and rebuild them quickly into an operational network. Progent has worked with top cyber insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Louisville
To get in touch with Progent about ransomware settlement services in Louisville, phone Progent at 800-462-8800 or go to Contact Progent.