Ransomware Response Consulting Services

Progent's Ransomware Negotiation Services in Alpharetta
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated activity that calls for a mix of real-word experience, IT knowledge and business acumen. It also demands close co-operation with the victim's IT team and the insurance carrier, if there is one. Since the top priority of the ransomware target is operational continuity, it is critical to establish recovery groups that operate effectively, concurrently, and with intimate collaboration. Progent offers the scope of IT knowledge and the deep bench of personnel to complement your IT support team and restore your network rapidly and economically.

Support available from Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Verifying the hacker's decryption tool
• Budgeting a settlement range with the victim and the insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering regulations
• Managing the crypto-currency transfer to the TA
• Receiving, reviewing, and operating the TA's decryptor tool
• If necessary, contacting the TA for assistance with the decryptor utility

• Isolating infected endpoints to arrest the progress of the assault
• Making digital copies of every compromised device and data store to allow forensics without interfering with restoration
• Adding anti-virus protection to all virus-free endpoints
• Salvaging data from offline restores or unscathed endpoints
• Creating a clean environment
• Remapping and reconnecting drives to reflect exactly their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding money for a decryption utility, current strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate files. Hackers can then demand an extra ransom for not publishing this information on the dark web. Sadly, there is no method to be certain that stolen files have been totally deleted by the TA. Actually, in many cases the TA has little say about who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy lawyers, conducting an audit on which files were taken, and carrying out the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications such as CISA, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP applications. This scope of expertise allows Progent to identify and consolidate the surviving pieces of your IT environment following a ransomware assault and reconstruct them quickly into a functioning network. Progent has collaborated with top cyber insurance carriers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Alpharetta
To contact with Progent about crypto-ransomware settlement negotiation services in Alpharetta, call Progent at 800-462-8800 or go to Contact Progent.