Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Akron
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated exercise that requires a combination of field experience, technical knowledge and business savvy. It also requires working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Since the top goal of the ransomware target is operational continuity, it is critical to deploy response teams that work effectively, in parallel, and with intimate collaboration. Progent has the scope of IT knowledge and the deep bench of personnel to complement your IT support team and recover your network quickly and economically.

Support offered by Progent's ransomware settlement experts include:

• Establishing the type of ransomware used in the attack
• Making contact with the hacker persona
• Evaluating the recovery risk
• Validating the TA's decryption tool
• Budgeting a settlement with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the hacker
• Checking accordance with anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the TA's decryptor mechanism
• If necessary, contacting the hacker for assistance with the decryption utility

• Quarantining affected endpoints to prevent further progress of the assault
• Making digital copies of each breached server and endpoint and data store to allow forensics in parallel with restoration
• Installing anti-virus protection to all clean endpoints
• Recovering data from offline backups or unscathed endpoints
• Building a clean environment
• Mapping and connecting drives to reflect precisely their pre-encryption state

Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate information. Hackers are then able to demand a separate ransom in exchange for not posting this information or selling it. Unfortunately, there exists no method to be certain that exfiltrated files have been totally deleted by the TA. Actually, in many instances the threat actor has limited say over data custody. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy lawyers, performing an investigation into which files were compromised, and sending the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and on-premises IT services across the U.S. for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in foundation technologies such as Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This scope of skills gives Progent the ability to salvage and consolidate the undamaged parts of your network after a ransomware assault and reconstruct them rapidly into a functioning network. Progent has collaborated with leading cyber insurance carriers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Akron
To contact with Progent about ransomware settlement negotiation expertise in Akron, call Progent at 800-462-8800 or go to Contact Progent.