Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Colorado Springs
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that requires a mix of real-word experience, IT skills and business acumen. It also requires working closely with the victim's IT staff and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is critical to deploy response groups that operate effectively, concurrently, and in close communication. Progent has the breadth of technical skills and the deep bench of personnel to complement your network staff and restore your network quickly and economically.

Services provided by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Testing the TA's decryption capabilities
• Agreeing on a settlement amount with the victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Confirming adherence to anti-money laundering laws
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the threat actor's decryption tool
• If necessary, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints to prevent further progress of the attack
• Creating digital copies of each breached device and data store in order to perform forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Recovering files from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Remapping and reconnecting drives to reflect exactly their pre-encryption condition

Settling Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate files. TAs are then able to require an additional ransom for not divulging this information or selling it. Unfortunately, there exists no way to be certain that stolen files have been completely deleted by the hacker. Actually, in numerous cases the TA has limited say about where the information ends up. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of privacy attorneys, performing an audit on which data were compromised, and performing the required notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services across the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have been awarded advanced certifications in core technology platforms including Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP software. This broad array of skills allows Progent to identify and integrate the surviving parts of your IT environment after a ransomware assault and reconstruct them rapidly into a functioning network. Progent has worked with leading cyber insurance providers like Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Services in Colorado Springs
To get in touch with Progent about ransomware settlement negotiation services in Colorado Springs, phone Progent at 800-462-8800 or go to Contact Progent.