The Anatomy of Ransomware Response

You just discovered ransomware on your network - you've engaged your ransomware response vendors, and they're ready to stop the bad actors in their tracks... but how do they do it?

Join us for an inside look at what really happens behind the scenes during a ransomware event and how cyber partners work together to help organizations respond, recover and reduce long-term impact.

Our panel of experts will walk through the full lifecycle of ransomware response including:

How insurers support organizations from initial triage through claim resolution;
The role of breach counsel in managing legal, regulatory and communication risks;
How ransomware negotiations are handled and what factors influence payment decisions;
The role of digital forensics in identifying root cause, containing threats and restoring operations;
Common post-incident costs and where cyber insurance may provide coverage;
Practical lessons organizations can apply now to improve readiness before an attack occurs; and more.

Whether you are responsible for risk, IT, operations or insurance, this session will provide practical insight into what an effective ransomware response looks like and how to explain it to your clients and colleagues.

Ray Moylan
US Claims Manager, BOXX Insurance

Ray Moylan is an internationally recognized claims leader specializing in client-side claims experience. Bringing more than a decade of expertise to the field and having handled over 1,000 cyber claims implicating policies from all major global insurers at a top global cyber brokerage, he has built a reputation for designing and implementing innovative products, systems, and processes that maximize efficiency in claims handling. Ray is deeply passionate about redefining the standard for cyber claims services, with a focus on creating client-first solutions that deliver clarity, speed, and exceptional outcomes in an increasingly complex risk landscape.

Sian Schafle
Partner, Mullen Coughlin

Sian Schafle is a Partner at Mullen Coughlin and Chair of the Incident Response practice. Sian manages over 100 incident response attorneys in their provision of Breach Counsel services to organizations who are suffering, or have already suffered, a data privacy and security incident. She works diligently to cultivate and nurture the Firm’s relationships with the various incident response stakeholders, such as cyber insurance carrier and broker partners, forensic investigation firms, law enforcement, and other regulatory agencies, among others. Sian has handled hundreds of data privacy and security incidents including ransomware attacks, business email compromises, and other unauthorized network intrusions.

Max Henderson
Global Head of Digital Forensics and Incident Response, Kroll

Max Henderson is the Global Head of Digital Forensics and Incident Response (DFIR) in Kroll’s Cyber & Data Resilience business, and is based in Tampa. Max leverages more than 10 years of experience in DFIR to drive Kroll Cyber Response’s growth and enable leading organizations to address ransomware, email compromises, insider threats, zero-day vulnerabilities, and other security threats. To date, Max has directly led over 1,000 incident response cases. His casework has commonly been featured on news headlines. Max has also served as an expert witness for the Fortune100 and as a multi-time expert contributor to CNN.

Jason Kotler, BA, JD, MBA, CMC
CEO & Founder, CyberSteward Inc.

Jason Kotler is Founder and CEO of CyberSteward Inc., a global leader in cyber extortion advisory, negotiation, and cyber settlements. He has managed more than 2,000 cyber extortion incidents and built a crisis response team with a 100% success rate on complex, time-sensitive matters. With 25+ years of C-suite leadership experience, Jason has led cybersecurity, privacy, and business transformation initiatives across regulated industries. His background includes executive roles in private equity, technology, consulting, and law, bringing deep expertise in cyber risk, strategy, and crisis management.

The Anatomy of Ransomware Response: Vendor Panel