Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Glendale
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated activity that calls for a mix of real-word experience, technical skills and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the insurance provider, if any. Since the top goal of the ransomware target is operational continuity, it is critical to deploy response groups that work effectively, in parallel, and with intimate collaboration. Progent offers the scope of IT skills and the depth of experts to complement your network staff and restore your network environment rapidly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Verifying the threat actor's decryption capabilities
• Deciding on an acceptable settlement range with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Verifying compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the threat actor's decryption utility
• If necessary, contacting the threat actor for technical help with the decryption utility

• Quarantining affected endpoints to prevent further spread of the assault
• Creating digital copies of each compromised device and data store to allow forensics in parallel with restoration
• Installing A/V protection to all clean endpoints
• Restoring data from offline restores or unscathed endpoints
• Building a clean environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim often attempt to exfiltrate information. TAs can then require an extra ransom in exchange for not divulging this information on the dark web. Unfortunately, there exists no way to prove that stolen files have been totally erased by the threat actor. In fact, in many cases the hacker has limited control over the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of legal counsel, conducting an inventory of data were stolen, and sending the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned advanced certifications in core technologies such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications including CISM, CISSP, and GIAC. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and ERP software. This scope of expertise allows Progent to salvage and consolidate the undamaged pieces of your information system after a ransomware assault and reconstruct them quickly into a viable system. Progent has worked with top insurance providers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Services in Glendale
To get in touch with Progent about ransomware settlement negotiation guidance in Glendale, phone Progent at 800-993-9400 or go to Contact Progent.