Glossary: Security Operations and Incident Response

Negotiation

Also written: ransom negotiation

Communicating with an attacker, usually in a ransomware or extortion case, to gain time, proof, intelligence or better terms. Trained negotiators do it, and it is separate from any decision to pay.