Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Madison
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complex activity that requires a combination of field experience, IT knowledge and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance provider, if any. Because the number one priority of the ransomware victim is operational continuity, it is critical to deploy response groups that operate effectively, concurrently, and with intimate collaboration. Progent has the scope of IT skills and the depth of experts to complement your network staff and restore your network quickly and affordably.

Support provided by Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Agreeing on a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the hacker
• Verifying compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency payment to the hacker
• Receiving, learning, and operating the threat actor's decryption mechanism
• If necessary, contacting the TA for technical help with the decryptor tool

• Isolating affected endpoints to prevent further spread of the assault
• Making digital copies of each infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus agents to all virus-free endpoints
• Recovering data from offline restores or unscathed endpoints
• Creating a pristine environment
• Mapping and reconnecting drives to reflect exactly their pre-encryption state

Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of ransomware such as Ryuk, Maze, Netwalker, and Egregor often attempt to exfiltrate information. TAs are then able to demand an extra payment in exchange for not posting this information or selling it. Unfortunately, there exists no method to be certain that stolen files have been totally deleted by the TA. In fact, in numerous instances the hacker has little say about the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy attorneys, conducting an audit on which files were stolen, and sending the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite IT services throughout the U.S. for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have been awarded high-level certifications in core technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP application software. This scope of skills gives Progent the ability to identify and integrate the undamaged parts of your IT environment following a ransomware attack and rebuild them rapidly into a viable network. Progent has collaborated with top insurance providers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Madison
To contact with Progent about ransomware settlement expertise in Madison, call Progent at 800-462-8800 or go to Contact Progent.