Ransomware negotiations aren't just about money…

You're assessing compromise scope. Your technical team is containing the breach. Legal is evaluating disclosure requirements. And someone needs to communicate with the threat actors who are actively exploiting your uncertainty.

Ransomware negotiations operate on leverage, timing, and psychology…not just ransom amounts. The decisions you make in the first 72 hours determine whether you preserve options or lose control of the situation.

This isn't theoretical. Matt has negotiated with threat actors during live incidents, and he'll share what works, what backfires, and what you should never do.

Whether you're building an incident response plan or refining an existing one, this session offers practical frameworks for one of the highest-stakes scenarios in cybersecurity.

Covered in the Talk:

Communication

How threat actor communication patterns reveal leverage points and why pacing and message control often matter more than the ransom amount

Strategy

How negotiation strategy integrates with technical, legal, and business continuity considerations

Best Practices

Common mistakes that increase both cost and exposure

About ISC(2) Oklahoma City

The ISC2 Oklahoma City Metro Chapter was founded to connect, educate, and inspire information security professionals throughout the Oklahoma City metropolitan area to build fellowship and better secure the community at large. Due to your spectacular support, we were able to leave the charter phase in 2022 to become an official ISC2 chapter organization. We look forward to seeing you at the next meeting or event! Partner with us to develop and grow the profession while supporting our local community.