Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Bakersfield
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complicated activity that requires a mix of field experience, IT skills and business acumen. It also calls for close co-operation with the victim's IT staff and the cyber insurance provider, if any. Since the number one goal of the ransomware victim is operational continuity, it is critical to deploy response teams that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of IT skills and the deep bench of experts to supplement your IT staff and recover your network rapidly and affordably.

Services available from Progent's ransomware settlement team include:

• Establishing the kind of ransomware used in the assault
• making contact with the hacker
• Assessing the recovery risk
• Validating the threat actor's decryption tool
• Determining a settlement amount with the ransomware victim and the insurance carrier
• Establishing a settlement and timeline with the threat actor
• Confirming accordance with anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Receiving, reviewing, and operating the hacker's decryptor utility
• If necessary, contacting the hacker for technical help with the decryption utility

• Quarantining infected endpoints and data stores to arrest the progress of the attack
• Making replicas of each breached server and endpoint and data store to allow forensics without interfering with restoration
• Adding A/V protection to all clean endpoints
• Recovering data from air-gapped backups or unscathed machines
• Building a pristine recovery environment
• Mapping and connecting datastores to match precisely their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") files. Hackers can then require an additional ransom for not publishing this information on the dark web. Sadly, there exists no method to guarantee that exfiltrated data have been totally deleted by the threat actor. Actually, in many cases the TA has little control over the disposition of the data. Settling an exfiltration ransom does not free you from the need for getting the advice of legal counsel, conducting an audit on which files were taken, and sending the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite IT services throughout the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to identify and consolidate the undamaged pieces of your network following a ransomware attack and reconstruct them quickly into an operational network. Progent has collaborated with leading insurance carriers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Bakersfield
To get in touch with Progent about ransomware settlement negotiation services in Bakersfield, call Progent at 800-462-8800 or go to Contact Progent.