Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Services in Skokie
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complicated activity that requires a mix of field experience, technical knowledge and business savvy. It also demands working closely with the ransomware victim's IT team and the cyber insurance provider, if there is one. Since the number one goal of the ransomware target is fast recovery, it is vital to establish response teams that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT skills and the deep bench of experts to complement your network staff and restore your network environment rapidly and economically.

Support available from Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the assault
• identifying and contacting the hacker
• Assessing the recovery risk
• Testing the hacker's decryption capabilities
• Budgeting a settlement range with the ransomware victim and the insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Checking accordance with anti-money laundering (AML) laws
• Managing the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the TA's decryption mechanism
• If necessary, contacting the threat actor for technical help with the decryption tool

• Quarantining infected endpoints to prevent further progress of the assault
• Creating digital copies of every compromised server and endpoint and data store to allow forensics without interfering with recovery
• Adding anti-virus protection to all clean endpoints
• Recovering data from offline restores or unscathed machines
• Building a pristine recovery environment
• Mapping and connecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate files. Hackers can then require an additional ransom for not publishing this data on the dark web. Sadly, there is no way to prove that exfiltrated files have been totally deleted by the TA. Actually, in numerous cases the threat actor has limited say over data custody. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of privacy lawyers, performing an audit on which data were taken, and sending the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite IT services throughout the United States for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP applications. This broad array of expertise gives Progent the ability to identify and integrate the undamaged pieces of your information system after a ransomware attack and reconstruct them quickly into a viable network. Progent has collaborated with leading insurance providers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Skokie
To get in touch with Progent about ransomware settlement guidance in Skokie, phone Progent at 800-462-8800 or go to Contact Progent.