We know a lot about the technical aspects of ransomware, however what is less understood is how ransomware groups operate as a business. Many of the ransomware groups offer affiliate programs and provide software development lifecycles that rival many tech companies, many even offer a high level of support for both their affiliates and targets. In order to better understand that threat of ransomware it is important to understand the business drivers of these groups operations. In this session Ken Westin will highlight specific ransomware groups and provide an overview of not just their technical implementations, but how the operation runs as a business and how it drives continuous improvement and efficiencies in ransomware operations.