Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Allen
Progent has experience negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complicated activity that requires a mix of field experience, technical knowledge and business savvy. It also demands close co-operation with the ransomware victim's IT staff and the insurance provider, if there is one. Since the number one goal of the ransomware victim is fast recovery, it is critical to establish response groups that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT support team and restore your network environment quickly and economically.

Support provided by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Determining a settlement payment with the victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the TA
• Checking accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the TA
• Acquiring, reviewing, and using the threat actor's decryption utility
• If necessary, contacting the TA for assistance with the decryption tool

• Isolating affected endpoints and data stores to arrest the progress of the assault
• Creating digital copies of every compromised server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding anti-virus agents to all virus-free endpoints
• Salvaging files from air-gapped backups or unscathed endpoints
• Building a pristine environment
• Remapping and connecting datastores to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly attempt to exfiltrate information. TAs are then able to demand an additional settlement for not publishing this information or selling it. Sadly, there is no method to be certain that exfiltrated data have been totally deleted by the hacker. Actually, in many instances the threat actor has limited say over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for engaging the advice of legal counsel, performing an audit on which data were compromised, and carrying out the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises network services across the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning application software. This broad array of skills allows Progent to salvage and integrate the undamaged parts of your network following a ransomware intrusion and rebuild them rapidly into an operational network. Progent has collaborated with top insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Allen
To get in touch with Progent about ransomware settlement negotiation expertise in Allen, call Progent at 800-462-8800 or go to Contact Progent.