Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Mesa
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complex activity that calls for a mix of real-word experience, technical knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT staff and the insurance carrier, if there is one. Because the top goal of the ransomware victim is fast recovery, it is critical to establish response groups that work efficiently, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the deep bench of personnel to supplement your IT staff and restore your network environment quickly and affordably.

Support offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Verifying the hacker's decryption capabilities
• Budgeting a settlement range with the victim and the insurance carrier
• Establishing a settlement and timeline with the TA
• Confirming compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the TA
• Receiving, reviewing, and using the TA's decryption tool
• If necessary, contacting the TA for technical help with the decryption tool

• Isolating affected endpoints and data stores to prevent further spread of the attack
• Making replicas of each breached device and data store to allow forensics without interfering with recovery
• Installing anti-virus protection to all clean endpoints
• Restoring files from air-gapped backups or unscathed machines
• Creating a clean environment
• Remapping and connecting drives to reflect precisely their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to exfiltrate information. TAs can then demand an extra ransom for not posting this information or selling it. Unfortunately, there is no way to prove that stolen data have been totally deleted by the TA. Actually, in numerous cases the hacker has little say about data custody. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, performing an investigation into which files were compromised, and sending the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and onsite IT services across the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned high-level certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and Enterprise Resource Planning applications. This scope of skills gives Progent the ability to salvage and integrate the undamaged parts of your information system following a ransomware assault and rebuild them rapidly into an operational network. Progent has collaborated with top insurance carriers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Mesa
To contact with Progent about ransomware settlement expertise in Mesa, call Progent at 800-462-8800 or go to Contact Progent.