Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Saddle Brook
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that requires a mix of field experience, technical skills and business savvy. It also requires working closely with the victim's IT staff and the cyber insurance provider, if there is one. Because the top goal of the ransomware target is fast recovery, it is vital to deploy response teams that operate efficiently, concurrently, and in close communication. Progent offers the scope of IT skills and the depth of personnel to supplement your network staff and recover your network rapidly and economically.

Services offered by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the attack
• identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Determining a settlement amount with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and schedule with the hacker
• Verifying adherence to anti-money laundering laws
• Overseeing the crypto-currency payment to the TA
• Acquiring, reviewing, and using the threat actor's decryption tool
• If necessary, contacting the TA for technical assistance with the decryption utility

• Quarantining affected endpoints to prevent further spread of the assault
• Creating replicas of every infected device and data store in order to perform forensics without interfering with cleanup
• Installing A/V agents to all virus-free endpoints
• Restoring data from air-gapped backups or uncompromised endpoints
• Creating a clean recovery environment
• Mapping and connecting drives to reflect exactly their pre-encryption condition

Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate files. TAs can then demand an extra ransom in exchange for not divulging this data on the dark web. Sadly, there is no way to be certain that exfiltrated data have been completely erased by the hacker. Actually, in many instances the threat actor has limited control over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, performing an investigation into which files were taken, and performing the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services across the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in core technologies including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISA, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also offers guidance in financial and ERP application software. This breadth of expertise allows Progent to identify and integrate the undamaged parts of your network following a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has collaborated with top cyber insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Saddle Brook
To get in touch with Progent about ransomware settlement negotiation services in Saddle Brook, phone Progent at 800-462-8800 or go to Contact Progent.