Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Broomfield
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complicated exercise that requires a mix of real-word experience, technical skills and business savvy. It also calls for close co-operation with the ransomware victim's IT team and the cyber insurance provider, if there is one. Because the top priority of the ransomware victim is fast recovery, it is vital to establish recovery groups that work effectively, in parallel, and in close communication. Progent offers the breadth of IT skills and the depth of personnel to complement your IT support team and restore your network environment rapidly and economically.

Services available from Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the assault
• Making contact with the hacker
• Evaluating the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Determining a settlement amount with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the TA
• Checking adherence to anti-money laundering (AML) laws
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the TA's decryption mechanism
• If needed, contacting the hacker for technical assistance with the decryptor utility

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Making digital copies of each infected server and endpoint and data store in order to perform forensics in parallel with recovery
• Adding anti-virus protection to all virus-free endpoints
• Recovering data from offline backups or unscathed machines
• Creating a pristine recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate information. Hackers are then able to require a separate settlement for not divulging this information on the dark web. Unfortunately, there exists no method to be certain that stolen files have been totally erased by the threat actor. In fact, in numerous cases the hacker has little say over who can access the stolen files. Paying an exfiltration ransom does not free you from the need for seeking the guidance of privacy attorneys, performing an audit on which files were taken, and performing the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in core technologies including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial management and Enterprise Resource Planning software. This scope of skills allows Progent to salvage and consolidate the surviving parts of your network following a ransomware attack and reconstruct them quickly into a functioning network. Progent has worked with leading cyber insurance providers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Broomfield
To get in touch with Progent about crypto-ransomware settlement guidance in Broomfield, call Progent at 800-462-8800 or go to Contact Progent.