Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Savannah
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex activity that calls for a mix of field experience, technical knowledge and business savvy. It also requires working closely with the victim's IT team and the cyber insurance carrier, if any. Since the number one goal of the ransomware victim is fast recovery, it is critical to deploy recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of IT knowledge and the depth of experts to supplement your network staff and recover your network environment quickly and economically.

Services offered by Progent's ransomware settlement team include:

• Establishing the type of ransomware involved in the attack
• identifying and contacting the hacker
• Evaluating the recovery risk
• Validating the hacker's decryption tool
• Budgeting a settlement range with the victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Checking compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the threat actor's decryptor tool
• If necessary, contacting the hacker for technical assistance with the decryptor utility

• Quarantining infected endpoints and data stores to arrest the progress of the attack
• Creating replicas of every breached server and endpoint and data store to allow forensics in parallel with recovery
• Adding A/V agents to all virus-free endpoints
• Salvaging files from offline restores or uncompromised machines
• Creating a clean recovery environment
• Remapping and connecting datastores to reflect precisely their pre-encryption condition

Settling Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to exfiltrate files. TAs are then able to require an extra settlement for not divulging this data on the dark web. Unfortunately, there exists no method to guarantee that stolen data have been totally deleted by the hacker. Actually, in numerous instances the threat actor has little control over data custody. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy lawyers, conducting an investigation into which files were stolen, and performing the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services throughout the U.S. for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in foundation technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISA, CISSP, and GIAC. (Refer to Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to identify and consolidate the surviving pieces of your information system after a ransomware assault and reconstruct them rapidly into a functioning network. Progent has collaborated with top cyber insurance providers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Savannah
To contact with Progent about ransomware settlement negotiation expertise in Savannah, phone Progent at 800-462-8800 or go to Contact Progent.