Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in San Juan
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complicated exercise that requires a combination of field experience, technical skills and business savvy. It also demands working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Because the number one goal of the ransomware victim is operational continuity, it is critical to establish response teams that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical skills and the depth of experts to complement your network support team and restore your network environment rapidly and economically.

Services provided by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware involved in the attack
• identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Testing the TA's decryption capabilities
• Determining a settlement amount with the victim and the insurance carrier
• Establishing a settlement and timeline with the hacker
• Confirming accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the hacker
• Receiving, reviewing, and operating the TA's decryption tool
• If necessary, contacting the TA for assistance with the decryptor utility

• Quarantining affected endpoints and data stores to arrest the spread of the assault
• Creating digital copies of every compromised device and data store in order to perform forensics without interfering with cleanup
• Installing anti-virus protection to all clean endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Creating a clean environment
• Remapping and reconnecting drives to match exactly their pre-encryption state

Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to exfiltrate information. Hackers are then able to demand an extra settlement in exchange for not publishing this data on the dark web. Sadly, there is no method to guarantee that exfiltrated data have been completely deleted by the hacker. In fact, in numerous instances the hacker has limited control about the disposition of the data. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, conducting an audit on which data were taken, and sending the necessary alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the United States for over 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in foundation technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP software. This breadth of expertise gives Progent the ability to salvage and integrate the surviving parts of your IT environment after a ransomware attack and reconstruct them quickly into a functioning network. Progent has worked with top insurance carriers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in San Juan
To get in touch with Progent about ransomware settlement guidance in San Juan, call Progent at 800-462-8800 or go to Contact Progent.