Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Sherman Oaks
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that calls for a combination of real-word experience, IT skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Because the number one goal of the ransomware victim is operational continuity, it is critical to establish response groups that operate efficiently, concurrently, and in close communication. Progent offers the breadth of technical skills and the deep bench of experts to complement your IT support team and recover your network rapidly and affordably.

Services offered by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware involved in the attack
• Making contact with the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Agreeing on a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the TA
• Verifying accordance with anti-money laundering laws
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the hacker's decryptor utility
• If necessary, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining affected endpoints to arrest the progress of the attack
• Creating replicas of each compromised device and data store in order to perform forensics without interfering with cleanup
• Adding A/V protection to all virus-free endpoints
• Salvaging files from air-gapped restores or uncompromised endpoints
• Creating a pristine environment
• Remapping and reconnecting datastores to match exactly their pre-encryption state

Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to exfiltrate files. TAs can then require an extra payment for not posting this information on the dark web. Unfortunately, there is no method to be certain that stolen data have been completely deleted by the hacker. Actually, in numerous cases the TA has limited control about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for seeking the advice of privacy lawyers, performing an inventory of files were taken, and sending the required alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the U.S. for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This scope of expertise allows Progent to identify and consolidate the surviving parts of your IT environment following a ransomware intrusion and rebuild them rapidly into a functioning network. Progent has collaborated with leading insurance providers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Sherman Oaks
To get in touch with Progent about ransomware settlement negotiation services in Sherman Oaks, call Progent at 800-462-8800 or go to Contact Progent.