Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Santa Rosa
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complex activity that calls for a combination of field experience, IT skills and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Because the number one goal of the ransomware target is operational continuity, it is vital to establish response groups that operate efficiently, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the depth of experts to complement your network support team and restore your network quickly and economically.

Services available from Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption tool
• Budgeting a settlement payment with the victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the hacker
• Checking accordance with anti-money laundering (AML) regulations
• Carrying out the crypto-currency transfer to the hacker
• Receiving, reviewing, and operating the threat actor's decryption mechanism
• If necessary, contacting the threat actor for assistance with the decryption tool

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Creating digital copies of every compromised device and data store to allow forensics without interfering with restoration
• Installing anti-virus protection to all clean endpoints
• Recovering files from air-gapped restores or unscathed machines
• Building a clean recovery environment
• Remapping and reconnecting datastores to reflect precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to exfiltrate files. TAs are then able to demand a separate settlement for not posting this information on the dark web. Sadly, there exists no method to be certain that stolen files have been totally erased by the TA. Actually, in numerous cases the threat actor has little control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, conducting an investigation into which files were compromised, and sending the required alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite network services throughout the United States for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware, and major distributions of Linux. Progent's data security experts have earned internationally recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning applications. This broad array of expertise gives Progent the ability to identify and integrate the surviving parts of your information system after a ransomware assault and reconstruct them rapidly into a viable network. Progent has collaborated with top insurance providers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Santa Rosa
To contact with Progent about ransomware settlement guidance in Santa Rosa, phone Progent at 800-462-8800 or go to Contact Progent.