Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Calgary
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex activity that calls for a combination of real-word experience, IT skills and business acumen. It also demands working closely with the ransomware victim's IT staff and the cyber insurance carrier, if any. Because the top priority of the ransomware victim is operational continuity, it is vital to deploy response teams that operate effectively, in parallel, and with intimate collaboration. Progent has the scope of technical skills and the deep bench of experts to supplement your IT staff and restore your network environment quickly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware involved in the assault
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption tool
• Budgeting a settlement range with the victim and the insurance carrier
• Negotiating a settlement amount and schedule with the hacker
• Confirming accordance with anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and operating the threat actor's decryptor utility
• If necessary, contacting the threat actor for assistance with the decryptor tool

• Isolating affected endpoints to prevent further spread of the assault
• Creating digital copies of each breached device and data store in order to perform forensics in parallel with restoration
• Adding A/V protection to all clean endpoints
• Recovering data from offline backups or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting datastores to reflect precisely their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate information. Hackers can then require an additional ransom for not publishing this information or selling it. Sadly, there exists no method to be certain that exfiltrated data have been totally erased by the TA. Actually, in numerous instances the threat actor has little control about where the information ends up. Paying an exfiltration ransom does not eliminate the necessity of getting the advice of legal counsel, performing an audit on which data were stolen, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite IT services across the U.S. for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have been awarded advanced certifications in foundation technologies including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning applications. This breadth of skills allows Progent to identify and integrate the undamaged pieces of your network after a ransomware assault and reconstruct them quickly into an operational system. Progent has worked with leading insurance carriers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Calgary
To contact with Progent about crypto-ransomware settlement negotiation guidance in Calgary, phone Progent at 800-462-8800 or go to Contact Progent.