Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Durham
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complicated exercise that requires a combination of field experience, IT knowledge and business acumen. It also calls for close co-operation with the victim's IT team and the cyber insurance provider, if there is one. Because the number one priority of the ransomware target is fast recovery, it is critical to establish response groups that work efficiently, concurrently, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to supplement your IT support team and recover your network quickly and economically.

Services provided by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the attack
• Making contact with the hacker
• Evaluating the recovery risk
• Validating the TA's decryption tool
• Budgeting a settlement with the ransomware victim and the insurance provider
• Establishing a settlement and timeline with the TA
• Checking accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the hacker
• Receiving, learning, and using the hacker's decryptor mechanism
• If needed, contacting the hacker for technical assistance with the decryption tool

• Isolating infected endpoints to prevent further spread of the assault
• Creating digital copies of every breached device and data store to allow forensics without interfering with recovery
• Installing anti-virus agents to all clean endpoints
• Recovering files from offline restores or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting drives to match precisely their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate files. Hackers can then require an extra ransom for not publishing this data or selling it. Unfortunately, there is no way to guarantee that stolen files have been totally deleted by the hacker. In fact, in many cases the hacker has limited say over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of engaging the guidance of legal counsel, conducting an inventory of data were stolen, and sending the necessary notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned advanced certifications in foundation technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP application software. This scope of skills allows Progent to salvage and integrate the surviving parts of your information system following a ransomware assault and rebuild them rapidly into a viable network. Progent has collaborated with top cyber insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Durham
To get in touch with Progent about crypto-ransomware settlement guidance in Durham, call Progent at 800-462-8800 or go to Contact Progent.