Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Sherman Oaks
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated activity that calls for a combination of field experience, IT skills and business acumen. It also requires working closely with the victim's IT team and the cyber insurance provider, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is vital to establish response teams that work effectively, in parallel, and in close communication. Progent has the scope of technical skills and the depth of experts to complement your network support team and restore your network environment quickly and affordably.

Services offered by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Validating the hacker's decryption tool
• Agreeing on a settlement amount with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Checking compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the TA's decryption tool
• If necessary, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Creating replicas of each breached device and data store in order to perform forensics without interfering with recovery
• Adding anti-virus agents to all clean endpoints
• Restoring files from offline backups or unscathed machines
• Building a pristine recovery environment
• Remapping and reconnecting datastores to match precisely their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") files. TAs can then require an additional payment in exchange for not divulging this information on the dark web. Sadly, there exists no way to guarantee that stolen files have been completely erased by the hacker. In fact, in many cases the TA has little control over where the information ends up. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, conducting an inventory of data were compromised, and sending the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite IT services across the U.S. for over 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have earned high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP application software. This scope of skills gives Progent the ability to identify and integrate the undamaged parts of your network following a ransomware intrusion and rebuild them quickly into an operational system. Progent has collaborated with top cyber insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Sherman Oaks
To contact with Progent about crypto-ransomware settlement negotiation expertise in Sherman Oaks, call Progent at 800-462-8800 or go to Contact Progent.