Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Columbus
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that calls for a mix of field experience, technical knowledge and business savvy. It also demands close co-operation with the victim's IT staff and the insurance carrier, if any. Since the number one goal of the ransomware victim is operational continuity, it is critical to deploy response teams that operate efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of technical knowledge and the deep bench of personnel to supplement your IT support team and restore your network environment rapidly and economically.

Support offered by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware involved in the assault
• Making contact with the hacker persona
• Assessing the likelihood of recovery
• Verifying the TA's decryption capabilities
• Budgeting a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Confirming compliance with anti-money laundering regulations
• Carrying out the crypto-currency transfer to the hacker
• Receiving, reviewing, and operating the threat actor's decryption utility
• If necessary, contacting the TA for assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Creating replicas of every infected device and data store in order to perform forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring data from air-gapped restores or uncompromised machines
• Building a pristine environment
• Mapping and reconnecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to steal (or "exfiltrate") files. Hackers can then demand an additional settlement for not publishing this data or selling it. Unfortunately, there exists no method to prove that exfiltrated files have been totally erased by the hacker. Actually, in many instances the TA has limited say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the advice of privacy lawyers, conducting an audit on which files were compromised, and carrying out the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have been awarded high-level certifications in core technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning applications. This scope of skills allows Progent to identify and integrate the surviving parts of your IT environment following a ransomware assault and rebuild them rapidly into a viable network. Progent has worked with top insurance carriers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Columbus
To contact with Progent about crypto-ransomware settlement negotiation expertise in Columbus, phone Progent at 800-462-8800 or go to Contact Progent.