Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Birmingham
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated exercise that calls for a mix of field experience, IT knowledge and business acumen. It also calls for close co-operation with the ransomware victim's IT team and the insurance provider, if there is one. Since the number one goal of the ransomware target is fast recovery, it is vital to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of personnel to supplement your IT support team and recover your network rapidly and economically.

Services offered by Progent's ransomware settlement team include:

• Establishing the kind of ransomware used in the attack
• making contact with the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement range with the victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Confirming adherence to anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the TA
• Receiving, reviewing, and using the TA's decryption utility
• If needed, contacting the hacker for technical assistance with the decryptor tool

• Isolating infected endpoints and data stores to prevent further spread of the attack
• Making replicas of every compromised device and data store in order to perform forensics in parallel with recovery
• Adding A/V agents to all virus-free endpoints
• Salvaging data from air-gapped restores or uncompromised machines
• Building a pristine environment
• Mapping and reconnecting datastores to match exactly their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern variants of ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly attempt to exfiltrate files. Hackers can then require an additional payment in exchange for not posting this data or selling it. Unfortunately, there is no way to be certain that stolen data have been totally deleted by the TA. Actually, in many instances the hacker has little control about data custody. Paying an exfiltration ransom does not free you from the need for engaging the advice of privacy lawyers, performing an investigation into which data were compromised, and sending the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite IT services across the U.S. for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications including CISA, CISSP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to salvage and integrate the surviving parts of your information system following a ransomware attack and reconstruct them quickly into a viable system. Progent has collaborated with leading insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Birmingham
To contact with Progent about ransomware settlement negotiation services in Birmingham, phone Progent at 800-462-8800 or go to Contact Progent.