Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Services in Alpharetta
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex exercise that calls for a mix of real-word experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if there is one. Because the top priority of the ransomware target is fast recovery, it is critical to establish response groups that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the deep bench of personnel to complement your network staff and recover your network rapidly and economically.

Services provided by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Making contact with the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption tool
• Deciding on an acceptable settlement range with the ransomware victim and the insurance provider
• Establishing a settlement and schedule with the threat actor
• Checking adherence to anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and operating the hacker's decryption utility
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints to prevent further progress of the assault
• Creating digital copies of every infected device and data store to allow forensics without interfering with restoration
• Adding anti-virus agents to all virus-free endpoints
• Recovering files from offline backups or unscathed endpoints
• Building a pristine recovery environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate information. Hackers are then able to require an extra payment in exchange for not divulging this information or selling it. Unfortunately, there exists no way to be certain that stolen files have been totally deleted by the threat actor. Actually, in many cases the hacker has limited control about data custody. Settling an exfiltration ransom does not free you from the need for seeking the guidance of privacy attorneys, conducting an audit on which data were stolen, and carrying out the mandated notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises IT services throughout the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned advanced certifications in core technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP software. This broad array of skills allows Progent to identify and integrate the surviving parts of your network following a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has worked with top insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Services in Alpharetta
To contact with Progent about ransomware settlement negotiation guidance in Alpharetta, call Progent at 800-462-8800 or go to Contact Progent.