Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Services in Plano
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex exercise that calls for a mix of real-word experience, IT skills and business acumen. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if any. Since the top priority of the ransomware target is fast recovery, it is vital to deploy recovery teams that operate effectively, in parallel, and in close communication. Progent offers the scope of IT knowledge and the depth of experts to complement your network support team and restore your network rapidly and affordably.

Support offered by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware used in the assault
• identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Validating the hacker's decryption capabilities
• Agreeing on a settlement amount with the ransomware victim and the cyber insurance provider
• Establishing a settlement and timeline with the threat actor
• Verifying compliance with anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and using the hacker's decryption tool
• If needed, contacting the hacker for technical assistance with the decryption utility

• Isolating infected endpoints to arrest the spread of the assault
• Making replicas of each infected device and data store to allow forensics without interfering with cleanup
• Installing A/V agents to all virus-free endpoints
• Restoring files from offline restores or unscathed machines
• Creating a pristine environment
• Remapping and connecting drives to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, current variants of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate files. TAs are then able to demand a separate ransom in exchange for not posting this information or selling it. Sadly, there exists no method to prove that stolen data have been totally deleted by the TA. Actually, in many instances the hacker has limited say about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy lawyers, performing an audit on which files were stolen, and carrying out the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises network services across the United States for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in core technology platforms including Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP software. This breadth of expertise allows Progent to salvage and integrate the surviving pieces of your IT environment following a ransomware intrusion and rebuild them rapidly into an operational system. Progent has worked with leading cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Plano
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Plano, call Progent at 800-462-8800 or go to Contact Progent.