Dealing with Shadows
A day in the life of a threat actor negotiator
A real-world look at adversary communication
with SEVN-X CEO, Matt Barnett

ISC(2) Oklahoma City
February 13th, 2026
11:30AM - 1PM CST
Online
or
In person [Oklahoma Christian University]
Ransomware negotiations aren't just about money…
You're assessing compromise scope. Your technical team is containing the breach. Legal is evaluating disclosure requirements. And someone needs to communicate with the threat actors who are actively exploiting your uncertainty.
Ransomware negotiations operate on leverage, timing, and psychology…not just ransom amounts. The decisions you make in the first 72 hours determine whether you preserve options or lose control of the situation.
This isn't theoretical. Matt has negotiated with threat actors during live incidents, and he'll share what works, what backfires, and what you should never do.
Whether you're building an incident response plan or refining an existing one, this session offers practical frameworks for one of the highest-stakes scenarios in cybersecurity.
Covered in the Talk:
Communication
How threat actor communication patterns reveal leverage points and why pacing and message control often matter more than the ransom amount
Strategy
How negotiation strategy integrates with technical, legal, and business continuity considerations
Best Practices
Common mistakes that increase both cost and exposure
About ISC(2) Oklahoma City
The ISC2 Oklahoma City Metro Chapter was founded to connect, educate, and inspire information security professionals throughout the Oklahoma City metropolitan area to build fellowship and better secure the community at large. Due to your spectacular support, we were able to leave the charter phase in 2022 to become an official ISC2 chapter organization. We look forward to seeing you at the next meeting or event! Partner with us to develop and grow the profession while supporting our local community.