Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Providence
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated activity that calls for a mix of field experience, technical skills and business savvy. It also calls for working closely with the ransomware victim's IT team and the insurance provider, if any. Because the top goal of the ransomware target is operational continuity, it is vital to deploy response groups that work efficiently, concurrently, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to supplement your IT support team and restore your network environment rapidly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Testing the TA's decryption capabilities
• Budgeting a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Confirming compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the hacker
• Receiving, reviewing, and operating the TA's decryptor utility
• If needed, contacting the hacker for assistance with the decryptor utility

• Quarantining infected endpoints to prevent further spread of the attack
• Creating digital copies of each infected device and data store in order to perform forensics without interfering with restoration
• Installing A/V agents to all virus-free endpoints
• Recovering data from offline restores or unscathed endpoints
• Creating a clean environment
• Mapping and reconnecting drives to reflect precisely their pre-encryption condition

Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") information. TAs can then require an additional payment in exchange for not publishing this data on the dark web. Sadly, there exists no method to prove that stolen files have been totally deleted by the hacker. In fact, in many instances the TA has limited say about the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of privacy lawyers, performing an audit on which files were taken, and carrying out the required notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to salvage and integrate the undamaged pieces of your network following a ransomware assault and reconstruct them quickly into a functioning system. Progent has collaborated with leading cyber insurance providers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Providence
To get in touch with Progent about ransomware settlement services in Providence, phone Progent at 800-462-8800 or go to Contact Progent.