Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Chatsworth
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that calls for a mix of field experience, IT skills and business acumen. It also demands working closely with the ransomware victim's IT team and the cyber insurance provider, if there is one. Since the number one priority of the ransomware target is fast recovery, it is vital to deploy response groups that operate effectively, concurrently, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of personnel to supplement your network staff and recover your network environment quickly and affordably.

Services provided by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the assault
• Making contact with the hacker persona
• Assessing the recovery risk
• Validating the threat actor's decryption capabilities
• Budgeting a settlement amount with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Verifying compliance with anti-money laundering (AML) laws
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the TA's decryptor tool
• If necessary, contacting the threat actor for technical help with the decryption utility

• Quarantining infected endpoints and data stores to arrest the spread of the attack
• Creating replicas of every breached device and data store to allow forensics without interfering with restoration
• Installing anti-virus protection to all clean endpoints
• Recovering files from offline restores or unscathed machines
• Building a pristine recovery environment
• Remapping and reconnecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often try to exfiltrate files. Hackers can then require an extra settlement in exchange for not publishing this data on the dark web. Unfortunately, there exists no method to prove that stolen files have been totally erased by the hacker. Actually, in many instances the threat actor has limited say over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for seeking the advice of privacy lawyers, performing an audit on which data were compromised, and carrying out the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite network services across the United States for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in core technology platforms such as Cisco infrastructure, VMware, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP applications. This breadth of skills gives Progent the ability to salvage and consolidate the surviving parts of your IT environment after a ransomware attack and reconstruct them rapidly into a functioning network. Progent has worked with top cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Chatsworth
To contact with Progent about ransomware settlement negotiation guidance in Chatsworth, call Progent at 800-462-8800 or go to Contact Progent.