Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Orlando
Progent has experience negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complicated activity that requires a combination of field experience, technical skills and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance carrier, if any. Because the top priority of the ransomware target is operational continuity, it is vital to establish recovery groups that operate efficiently, in parallel, and in close communication. Progent has the breadth of IT knowledge and the depth of personnel to complement your network staff and recover your network environment quickly and affordably.

Services available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Validating the threat actor's decryption capabilities
• Budgeting a settlement range with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Confirming accordance with anti-money laundering laws
• Managing the crypto-currency transfer to the TA
• Acquiring, learning, and operating the TA's decryptor mechanism
• If needed, contacting the TA for assistance with the decryption tool

• Quarantining infected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of each infected device and data store in order to perform forensics without interfering with cleanup
• Installing anti-virus protection to all clean endpoints
• Restoring data from air-gapped backups or unscathed endpoints
• Building a clean recovery environment
• Remapping and reconnecting drives to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, current variants of crypto-ransomware like Ryuk, Maze, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs can then require an extra ransom for not divulging this information on the dark web. Sadly, there is no method to be certain that exfiltrated data have been completely erased by the hacker. Actually, in many instances the hacker has limited control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of privacy attorneys, conducting an investigation into which files were taken, and performing the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned prestigious certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning application software. This scope of expertise gives Progent the ability to identify and consolidate the undamaged pieces of your network after a ransomware attack and reconstruct them quickly into a functioning system. Progent has collaborated with top cyber insurance carriers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Orlando
To contact with Progent about crypto-ransomware settlement negotiation expertise in Orlando, call Progent at 800-462-8800 or go to Contact Progent.