Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Tucson
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complicated exercise that calls for a combination of field experience, technical skills and business acumen. It also demands working closely with the victim's IT team and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent has the scope of IT skills and the deep bench of personnel to supplement your IT support team and recover your network environment rapidly and economically.

Services offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Validating the TA's decryption capabilities
• Agreeing on a settlement range with the victim and the cyber insurance provider
• Establishing a settlement amount and schedule with the hacker
• Verifying accordance with anti-money laundering regulations
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the TA's decryptor utility
• If needed, contacting the hacker for technical help with the decryption utility

• Quarantining affected endpoints to prevent further spread of the attack
• Creating replicas of every infected device and data store to allow forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Salvaging data from air-gapped backups or unscathed endpoints
• Building a clean recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to exfiltrate information. Hackers are then able to demand an additional settlement for not divulging this data on the dark web. Sadly, there exists no method to be certain that exfiltrated data have been totally deleted by the threat actor. Actually, in many instances the hacker has little control over data custody. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of legal counsel, performing an inventory of files were stolen, and carrying out the necessary alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite IT services across the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have earned advanced certifications in foundation technology platforms including Cisco networking, VMware, and major distributions of Linux. Progent's data security consultants have earned internationally recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning applications. This scope of skills gives Progent the ability to salvage and integrate the undamaged pieces of your network following a ransomware intrusion and rebuild them quickly into a viable network. Progent has worked with leading insurance providers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Tucson
To get in touch with Progent about ransomware settlement negotiation expertise in Tucson, call Progent at 800-462-8800 or go to Contact Progent.