Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Brighton
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex activity that requires a combination of field experience, IT knowledge and business savvy. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the number one goal of the ransomware victim is fast recovery, it is critical to deploy response groups that work efficiently, concurrently, and in close communication. Progent offers the scope of technical knowledge and the depth of experts to complement your IT support team and recover your network environment rapidly and affordably.

Support provided by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption capabilities
• Determining a settlement payment with the victim and the insurance provider
• Establishing a settlement amount and timeline with the TA
• Checking adherence to anti-money laundering regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and using the TA's decryptor tool
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining affected endpoints and data stores to prevent further spread of the assault
• Making digital copies of each infected device and data store to allow forensics without interfering with cleanup
• Installing A/V protection to all virus-free endpoints
• Restoring data from offline restores or unscathed machines
• Creating a pristine environment
• Mapping and connecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to exfiltrate information. TAs are then able to require an extra ransom for not divulging this information or selling it. Unfortunately, there exists no way to prove that stolen data have been completely erased by the threat actor. Actually, in numerous cases the hacker has little control about who can access the stolen files. Settling an exfiltration ransom does not free you from the need for seeking the guidance of privacy attorneys, conducting an investigation into which files were compromised, and sending the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the United States for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technologies including Cisco networking, VMware, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning application software. This scope of expertise gives Progent the ability to identify and consolidate the surviving pieces of your information system after a ransomware intrusion and reconstruct them quickly into an operational network. Progent has worked with leading insurance providers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Brighton
To get in touch with Progent about crypto-ransomware settlement negotiation services in Brighton, call Progent at 800-462-8800 or go to Contact Progent.