Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Long Beach
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complicated activity that calls for a combination of real-word experience, IT skills and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Since the top goal of the ransomware victim is fast recovery, it is critical to establish response teams that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of IT skills and the deep bench of experts to supplement your IT staff and recover your network rapidly and economically.

Services provided by Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Deciding on an acceptable settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Confirming compliance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the TA's decryptor utility
• If needed, contacting the hacker for technical help with the decryption utility

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Creating digital copies of every infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed endpoints
• Creating a clean recovery environment
• Remapping and connecting datastores to match precisely their pre-encryption state

Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") information. Hackers can then require a separate settlement for not publishing this information or selling it. Unfortunately, there exists no method to guarantee that stolen files have been completely deleted by the threat actor. Actually, in numerous instances the hacker has little control over data custody. Paying an exfiltration ransom does not eliminate the need for getting the guidance of privacy lawyers, performing an inventory of data were compromised, and performing the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have earned high-level certifications in foundation technologies including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP application software. This scope of skills allows Progent to salvage and consolidate the surviving pieces of your network after a ransomware intrusion and reconstruct them quickly into a functioning network. Progent has collaborated with leading insurance providers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Long Beach
To get in touch with Progent about ransomware settlement negotiation expertise in Long Beach, call Progent at 800-462-8800 or go to Contact Progent.