Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Services in Alpharetta
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated activity that requires a mix of real-word experience, IT knowledge and business acumen. It also calls for working closely with the cyber-extortion target's IT staff and the insurance carrier, if any. Since the top goal of the ransomware victim is operational continuity, it is vital to establish response groups that work efficiently, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of experts to supplement your IT support team and recover your network rapidly and affordably.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the assault
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Verifying the threat actor's decryption capabilities
• Budgeting a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Checking compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and using the threat actor's decryptor mechanism
• If needed, contacting the threat actor for assistance with the decryption tool

• Quarantining affected endpoints and data stores to arrest the progress of the assault
• Making replicas of every compromised device and data store in order to perform forensics without interfering with restoration
• Adding anti-virus agents to all clean endpoints
• Salvaging files from air-gapped restores or uncompromised machines
• Building a clean environment
• Remapping and reconnecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate information. TAs are then able to demand a separate payment in exchange for not posting this data on the dark web. Sadly, there exists no method to be certain that exfiltrated data have been totally deleted by the TA. In fact, in numerous instances the hacker has limited say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for getting the advice of legal counsel, performing an investigation into which files were compromised, and performing the necessary alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and on-premises IT services throughout the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP application software. This breadth of skills gives Progent the ability to identify and integrate the undamaged parts of your network after a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has worked with top insurance providers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Alpharetta
To get in touch with Progent about crypto-ransomware settlement expertise in Alpharetta, call Progent at 800-462-8800 or go to Contact Progent.