Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Centennial
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complicated activity that calls for a combination of real-word experience, IT knowledge and business savvy. It also demands working closely with the victim's IT team and the insurance provider, if there is one. Since the number one priority of the ransomware target is fast recovery, it is vital to deploy response groups that work effectively, concurrently, and in close communication. Progent offers the scope of technical skills and the depth of experts to complement your IT staff and restore your network rapidly and economically.

Services offered by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the TA's decryption tool
• Budgeting a settlement with the ransomware victim and the cyber insurance provider
• Establishing a settlement and timeline with the TA
• Checking compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the hacker
• Acquiring, learning, and using the TA's decryption mechanism
• If needed, contacting the hacker for technical assistance with the decryption utility

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Making digital copies of every infected device and data store in order to perform forensics without interfering with cleanup
• Adding A/V protection to all virus-free endpoints
• Recovering files from air-gapped backups or unscathed endpoints
• Building a pristine recovery environment
• Mapping and connecting datastores to match exactly their pre-encryption state

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs can then require an extra settlement in exchange for not publishing this information or selling it. Sadly, there exists no way to guarantee that stolen data have been completely deleted by the TA. Actually, in many instances the threat actor has limited control about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy lawyers, conducting an inventory of files were compromised, and performing the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services across the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial management and Enterprise Resource Planning applications. This scope of expertise allows Progent to identify and consolidate the undamaged parts of your network after a ransomware assault and reconstruct them rapidly into a viable system. Progent has collaborated with leading cyber insurance carriers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Centennial
To contact with Progent about ransomware settlement negotiation expertise in Centennial, phone Progent at 800-462-8800 or go to Contact Progent.