Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Morgan Hill
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated activity that requires a combination of real-word experience, technical knowledge and business savvy. It also calls for close co-operation with the cyber-extortion target's IT team and the insurance carrier, if there is one. Because the top priority of the ransomware target is fast recovery, it is vital to establish recovery teams that work effectively, concurrently, and in close communication. Progent offers the scope of IT knowledge and the deep bench of personnel to supplement your network support team and restore your network quickly and affordably.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the hacker's decryption capabilities
• Determining a settlement range with the victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the TA
• Checking adherence to anti-money laundering laws
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, learning, and operating the TA's decryptor mechanism
• If necessary, contacting the hacker for technical help with the decryptor utility

• Isolating affected endpoints and data stores to prevent further progress of the assault
• Making digital copies of every breached device and data store in order to perform forensics in parallel with cleanup
• Installing A/V protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate information. Hackers are then able to demand an extra settlement in exchange for not divulging this data or selling it. Unfortunately, there exists no way to guarantee that stolen files have been totally deleted by the hacker. Actually, in many cases the threat actor has little say over data custody. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of privacy attorneys, conducting an audit on which files were stolen, and sending the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP applications. This breadth of skills allows Progent to salvage and consolidate the undamaged parts of your information system after a ransomware attack and reconstruct them quickly into a viable network. Progent has worked with top insurance providers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Morgan Hill
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Morgan Hill, phone Progent at 800-462-8800 or go to Contact Progent.