Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Bakersfield
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complex exercise that requires a mix of field experience, IT knowledge and business acumen. It also calls for working closely with the ransomware victim's IT staff and the insurance provider, if there is one. Because the top priority of the ransomware victim is fast recovery, it is critical to establish response teams that work effectively, concurrently, and in close communication. Progent offers the scope of technical skills and the deep bench of experts to complement your network support team and recover your network quickly and economically.

Services offered by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Determining a settlement with the victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Verifying compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Acquiring, learning, and operating the threat actor's decryptor mechanism
• If needed, contacting the threat actor for technical help with the decryption utility

• Isolating infected endpoints and data stores to prevent further spread of the assault
• Creating replicas of each breached device and data store to allow forensics in parallel with restoration
• Installing A/V protection to all virus-free endpoints
• Recovering files from offline restores or unscathed endpoints
• Building a clean recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate files. Hackers can then demand an additional settlement for not publishing this information or selling it. Unfortunately, there is no method to guarantee that stolen data have been completely deleted by the TA. In fact, in many instances the TA has limited control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, conducting an investigation into which data were taken, and sending the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite IT services throughout the U.S. for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded advanced certifications in core technologies such as Cisco networking, VMware, and major distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISA, CISSP, and CRISC. (See certifications earned by Progent consultants). Progent also has guidance in financial and ERP application software. This scope of skills gives Progent the ability to salvage and integrate the undamaged parts of your information system after a ransomware assault and reconstruct them quickly into a functioning system. Progent has collaborated with leading insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Bakersfield
To contact with Progent about ransomware settlement negotiation expertise in Bakersfield, phone Progent at 800-462-8800 or go to Contact Progent.