Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Santa Monica
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that requires a mix of field experience, IT skills and business acumen. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Since the number one priority of the ransomware target is operational continuity, it is critical to deploy response teams that work effectively, concurrently, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to supplement your network staff and restore your network environment rapidly and affordably.

Support offered by Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the attack
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Verifying the threat actor's decryption tool
• Agreeing on a settlement amount with the ransomware victim and the insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Verifying compliance with anti-money laundering sanctions
• Carrying out the crypto-currency payment to the TA
• Receiving, learning, and using the TA's decryption tool
• If necessary, contacting the hacker for technical help with the decryption utility

• Quarantining infected endpoints to prevent further progress of the assault
• Making digital copies of each compromised server and endpoint and data store in order to perform forensics in parallel with restoration
• Adding anti-virus protection to all clean endpoints
• Restoring files from air-gapped restores or unscathed machines
• Building a clean environment
• Remapping and reconnecting datastores to reflect exactly their pre-encryption state

Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to exfiltrate files. Hackers can then require a separate ransom in exchange for not divulging this data on the dark web. Unfortunately, there is no method to be certain that stolen files have been totally deleted by the threat actor. Actually, in numerous cases the threat actor has limited say over data custody. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an audit on which files were taken, and carrying out the required notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services across the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technologies including Cisco infrastructure, VMware, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning software. This broad array of skills allows Progent to identify and integrate the surviving parts of your information system after a ransomware attack and reconstruct them rapidly into a functioning system. Progent has worked with leading insurance providers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Santa Monica
To contact with Progent about ransomware settlement negotiation guidance in Santa Monica, call Progent at 800-462-8800 or go to Contact Progent.