Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Raleigh
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated exercise that calls for a combination of real-word experience, IT knowledge and business acumen. It also demands close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware victim is fast recovery, it is critical to deploy response teams that operate effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT support team and recover your network rapidly and affordably.

Support provided by Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware involved in the assault
• Making contact with the hacker
• Assessing the recovery risk
• Testing the TA's decryption tool
• Budgeting a settlement range with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Checking adherence to anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the TA
• Receiving, reviewing, and using the hacker's decryptor tool
• If necessary, contacting the TA for assistance with the decryptor tool

• Quarantining infected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of each compromised device and data store to allow forensics in parallel with cleanup
• Installing anti-virus protection to all clean endpoints
• Salvaging data from offline restores or uncompromised machines
• Creating a clean recovery environment
• Remapping and connecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate files. Hackers are then able to require a separate payment for not publishing this information on the dark web. Unfortunately, there exists no method to be certain that exfiltrated files have been totally erased by the TA. Actually, in numerous cases the threat actor has little say about who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the advice of legal counsel, conducting an audit on which data were stolen, and performing the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the United States for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security experts have earned prestigious certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning software. This breadth of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your network after a ransomware assault and reconstruct them quickly into a functioning system. Progent has collaborated with leading insurance carriers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Raleigh
To contact with Progent about ransomware settlement negotiation services in Raleigh, phone Progent at 800-462-8800 or go to Contact Progent.