Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Irving
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complex exercise that requires a mix of real-word experience, technical knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT team and the insurance carrier, if there is one. Since the top goal of the ransomware victim is fast recovery, it is critical to deploy recovery groups that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical knowledge and the depth of experts to complement your network support team and restore your network environment quickly and affordably.

Support offered by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Testing the threat actor's decryption tool
• Determining a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the TA
• Confirming compliance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the TA's decryptor mechanism
• If needed, contacting the threat actor for assistance with the decryptor utility

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Making digital copies of each breached server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing A/V protection to all virus-free endpoints
• Restoring data from offline restores or unscathed endpoints
• Creating a clean environment
• Remapping and connecting datastores to match exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to exfiltrate information. TAs can then demand an extra payment in exchange for not posting this data on the dark web. Sadly, there is no method to guarantee that exfiltrated files have been totally deleted by the hacker. Actually, in many instances the hacker has little control over the disposition of the data. Paying an exfiltration ransom does not free you from the need for seeking the advice of privacy attorneys, conducting an inventory of data were compromised, and performing the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and on-premises IT services throughout the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This scope of skills allows Progent to salvage and integrate the surviving pieces of your information system following a ransomware attack and reconstruct them quickly into a viable system. Progent has worked with top insurance carriers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Irving
To get in touch with Progent about ransomware settlement guidance in Irving, phone Progent at 800-462-8800 or go to Contact Progent.