Ransomware Solutions Services

Progent's Ransomware Settlement Negotiation Consulting in Tulsa
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex exercise that requires a mix of field experience, technical skills and business acumen. It also demands working closely with the ransomware victim's IT staff and the insurance provider, if any. Since the number one priority of the ransomware target is operational continuity, it is vital to deploy response teams that work efficiently, in parallel, and in close communication. Progent offers the scope of technical skills and the depth of experts to complement your IT support team and restore your network environment quickly and affordably.

Services offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Validating the threat actor's decryption tool
• Determining a settlement with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency transfer to the TA
• Receiving, reviewing, and using the TA's decryptor mechanism
• If necessary, contacting the hacker for technical assistance with the decryptor utility

• Isolating affected endpoints to arrest the spread of the assault
• Making replicas of every compromised server and endpoint and data store to allow forensics without interfering with cleanup
• Installing A/V protection to all virus-free endpoints
• Salvaging data from offline restores or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting drives to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern strains of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly try to exfiltrate files. Hackers can then demand a separate payment in exchange for not publishing this information or selling it. Sadly, there exists no method to prove that stolen data have been totally deleted by the threat actor. In fact, in numerous instances the threat actor has little control over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of getting the guidance of legal counsel, performing an investigation into which data were stolen, and carrying out the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite IT services across the U.S. for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned high-level certifications in foundation technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also has top-tier support in financial management and ERP software. This breadth of skills gives Progent the ability to salvage and consolidate the surviving pieces of your IT environment after a ransomware attack and rebuild them quickly into a viable system. Progent has worked with top insurance carriers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Tulsa
To get in touch with Progent about ransomware settlement guidance in Tulsa, call Progent at 800-462-8800 or go to Contact Progent.