Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Cambridge
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated exercise that requires a combination of real-word experience, IT skills and business savvy. It also calls for working closely with the victim's IT staff and the cyber insurance carrier, if there is one. Because the number one goal of the ransomware victim is fast recovery, it is critical to establish response teams that operate effectively, concurrently, and in close communication. Progent offers the breadth of IT skills and the deep bench of experts to supplement your network staff and recover your network rapidly and economically.

Services provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Verifying the hacker's decryption tool
• Determining a settlement payment with the victim and the insurance carrier
• Negotiating a settlement and timeline with the TA
• Confirming accordance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the threat actor's decryptor mechanism
• If necessary, contacting the TA for technical help with the decryptor tool

• Isolating infected endpoints to arrest the progress of the attack
• Making digital copies of every breached device and data store to allow forensics without interfering with restoration
• Adding anti-virus protection to all virus-free endpoints
• Salvaging data from air-gapped backups or uncompromised machines
• Creating a clean environment
• Mapping and reconnecting drives to match precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding money for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") information. Hackers can then require an additional payment in exchange for not posting this data or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been totally deleted by the threat actor. Actually, in numerous cases the TA has little control over data custody. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, performing an investigation into which data were taken, and performing the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned industry-recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning applications. This breadth of expertise gives Progent the ability to salvage and integrate the surviving parts of your information system following a ransomware intrusion and rebuild them rapidly into an operational network. Progent has collaborated with leading insurance carriers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Cambridge
To contact with Progent about ransomware settlement expertise in Cambridge, call Progent at 800-462-8800 or go to Contact Progent.