Ransomware Response Consulting Services

Progent's Ransomware Negotiation Services in Bakersfield
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an acceptable settlement is a complicated activity that requires a mix of field experience, IT knowledge and business acumen. It also calls for close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is operational continuity, it is vital to establish recovery teams that work efficiently, concurrently, and in close communication. Progent offers the scope of IT skills and the depth of experts to complement your network support team and recover your network environment rapidly and affordably.

Services available from Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the assault
• identifying and contacting the hacker
• Assessing the recovery risk
• Verifying the hacker's decryption tool
• Agreeing on a settlement amount with the victim and the insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Acquiring, learning, and using the TA's decryption tool
• If necessary, contacting the TA for assistance with the decryption utility

• Quarantining affected endpoints to arrest the progress of the attack
• Making digital copies of every infected server and endpoint and data store to allow forensics in parallel with restoration
• Adding anti-virus agents to all virus-free endpoints
• Recovering data from air-gapped restores or unscathed endpoints
• Building a clean environment
• Mapping and connecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to exfiltrate files. TAs are then able to require an extra ransom in exchange for not divulging this information on the dark web. Sadly, there exists no method to guarantee that stolen data have been completely erased by the hacker. Actually, in many instances the TA has limited say about the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, conducting an audit on which data were taken, and performing the required alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications including CISA, CISSP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and ERP software. This broad array of expertise gives Progent the ability to identify and integrate the undamaged pieces of your information system following a ransomware assault and rebuild them quickly into an operational system. Progent has worked with leading cyber insurance carriers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Bakersfield
To contact with Progent about crypto-ransomware settlement expertise in Bakersfield, call Progent at 800-462-8800 or go to Contact Progent.