Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Bristol
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated exercise that calls for a combination of field experience, IT knowledge and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the insurance carrier, if there is one. Since the number one goal of the ransomware victim is operational continuity, it is vital to establish response teams that operate efficiently, in parallel, and with intimate collaboration. Progent offers the scope of IT skills and the deep bench of experts to complement your network support team and recover your network environment rapidly and economically.

Support offered by Progent's ransomware settlement negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Agreeing on a settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the TA
• Verifying accordance with anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Receiving, learning, and using the hacker's decryption utility
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to prevent further progress of the assault
• Making digital copies of each breached device and data store in order to perform forensics in parallel with cleanup
• Adding anti-virus agents to all clean endpoints
• Salvaging files from air-gapped backups or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and connecting datastores to reflect precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to steal (or "exfiltrate") files. TAs are then able to require an additional payment for not publishing this data or selling it. Unfortunately, there exists no method to be certain that stolen files have been completely erased by the hacker. Actually, in many cases the TA has limited control about the disposition of the data. Settling an exfiltration ransom does not eliminate the need for engaging the advice of legal counsel, conducting an audit on which files were taken, and carrying out the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and onsite IT services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial and ERP software. This broad array of expertise gives Progent the ability to salvage and consolidate the undamaged parts of your network after a ransomware assault and rebuild them quickly into a functioning system. Progent has collaborated with leading insurance providers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Bristol
To contact with Progent about crypto-ransomware settlement expertise in Bristol, phone Progent at 800-462-8800 or go to Contact Progent.