Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in San Juan
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated exercise that calls for a combination of real-word experience, IT skills and business acumen. It also calls for close co-operation with the cyber-extortion target's IT team and the insurance provider, if there is one. Since the number one goal of the ransomware victim is fast recovery, it is vital to establish response teams that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of technical skills and the deep bench of personnel to complement your IT staff and recover your network environment rapidly and affordably.

Support available from Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Validating the TA's decryption tool
• Budgeting a settlement with the ransomware victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Checking adherence to anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the hacker's decryptor mechanism
• If necessary, contacting the TA for assistance with the decryption tool

• Isolating affected endpoints to prevent further progress of the assault
• Making replicas of each compromised server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing anti-virus agents to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Building a pristine environment
• Remapping and connecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly attempt to exfiltrate files. TAs are then able to demand an additional settlement in exchange for not divulging this information or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been totally deleted by the hacker. Actually, in many cases the hacker has little control over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of engaging the advice of legal counsel, conducting an inventory of data were compromised, and performing the required notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services throughout the United States for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning software. This scope of skills gives Progent the ability to salvage and consolidate the surviving pieces of your information system after a ransomware attack and reconstruct them quickly into a viable network. Progent has worked with top insurance providers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in San Juan
To contact with Progent about ransomware settlement services in San Juan, phone Progent at 800-462-8800 or go to Contact Progent.