Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Services in Fort Collins
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated exercise that requires a combination of field experience, IT skills and business acumen. It also calls for close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Since the number one goal of the ransomware victim is operational continuity, it is vital to deploy recovery teams that work efficiently, concurrently, and in close communication. Progent has the scope of IT knowledge and the depth of personnel to complement your network staff and restore your network environment rapidly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware involved in the attack
• Making contact with the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Budgeting a settlement amount with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) sanctions
• Managing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the hacker's decryptor tool
• If necessary, contacting the threat actor for assistance with the decryption tool

• Isolating affected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of each breached server and endpoint and data store in order to perform forensics without interfering with cleanup
• Adding anti-virus protection to all clean endpoints
• Restoring files from air-gapped restores or unscathed endpoints
• Building a pristine recovery environment
• Remapping and reconnecting datastores to match precisely their pre-encryption condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate files. Hackers can then require a separate ransom in exchange for not divulging this information on the dark web. Sadly, there is no method to guarantee that stolen data have been completely deleted by the hacker. In fact, in many instances the threat actor has limited control over where the information ends up. Paying an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, performing an inventory of files were compromised, and performing the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services throughout the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware, and major Linux distros. Progent's data security experts have earned prestigious certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning application software. This scope of expertise gives Progent the ability to identify and consolidate the undamaged parts of your information system after a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with top cyber insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Fort Collins
To get in touch with Progent about ransomware settlement guidance in Fort Collins, call Progent at 800-462-8800 or go to Contact Progent.