Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Madison
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that calls for a combination of real-word experience, technical knowledge and business acumen. It also calls for working closely with the victim's IT team and the insurance carrier, if there is one. Since the number one goal of the ransomware victim is fast recovery, it is vital to establish recovery groups that work efficiently, concurrently, and in close communication. Progent has the scope of technical skills and the deep bench of personnel to complement your IT staff and recover your network rapidly and affordably.

Services available from Progent's ransomware negotiation experts include:

• Establishing the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption tool
• Budgeting a settlement range with the victim and the insurance provider
• Negotiating a settlement and timeline with the threat actor
• Confirming compliance with anti-money laundering regulations
• Overseeing the crypto-currency payment to the TA
• Receiving, learning, and operating the threat actor's decryption utility
• If needed, contacting the hacker for assistance with the decryption tool

• Isolating infected endpoints to prevent further spread of the assault
• Creating digital copies of every infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus protection to all clean endpoints
• Salvaging files from air-gapped backups or uncompromised endpoints
• Building a pristine environment
• Remapping and reconnecting drives to match precisely their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. Hackers can then require a separate ransom for not publishing this information or selling it. Sadly, there is no method to guarantee that stolen files have been completely erased by the threat actor. In fact, in numerous cases the TA has limited say about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for getting the guidance of privacy attorneys, conducting an investigation into which files were compromised, and carrying out the mandated notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises network services across the United States for over two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned high-level certifications in core technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP, and CRISC. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This scope of expertise allows Progent to identify and integrate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them quickly into a viable network. Progent has worked with top insurance carriers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Madison
To get in touch with Progent about crypto-ransomware settlement services in Madison, phone Progent at 800-462-8800 or go to Contact Progent.