Curt Shumate

WORK HISTORY

EDUCATION

ABOUT CURT SHUMATE

INCIDENT RESPONSE LEAD As a Senior Consultant Incident Response Lead at AreteIR, I am responsible for overseeing, validating, and coordinating all technical efforts of the engagement to ensure the investigation objectives and expectations are clearly communicated and achieved. Well versed in communicating with Client, Counsel and Carrier. With over 30 years of experience in the information technology and incident response space, I have led remediation efforts across many industries including financial services, consumer services, marketing and healthcare industries, helping businesses of all sizes restore operations quickly with minimal business interruption. •Responsible for leading a cross functional team tasked with responding to cyber incidents including data breaches, business email compromise, ransomware, malware attacks, and other cyber crimes. •Cross functional team includes project managers, restoration technicians, threat intelligence analysts, negotiators, and forensic analysts. •Lead scoping calls with clients to gain insight into their business to develop engagement requirements including business impacts, resources, disaster recovery/business continuity plans, and time needed to fully restore business operations. •Serve as the main point of contact for client and counsel throughout the entire engagement by maintaining open lines of communication with all stakeholders. •Plan customized business-focused strategies aimed to secure client environments from additional attacks, recovery of operations, secure forensic data for analysis, and coordination of restoration efforts. •Guide techs and Tech Leads on correct courses of action during an engagement, and assign tasks to the team based on strengths and capabilities •Collate and sent daily update reports to management on activities •Update documentation, improve upon existing processes, and create new processes and documentation •Set up client accounts and repositories •Engage with client IT staff to deploy EDR tools and secure the overall network landscape •Solve problems associated with ransomware/malware affecting endpoints •Advise on security standards to help improve security •Guide or perform the decryption of data when needed •Collect data from affected endpoints ensuring transmission to lab intake, including; collection of digital artifacts, and creating forensically sound images using FTK Imager or other tools •Mentor IT staff and peers when interesting features of an engagement appear •Develop scripts to automate tasks associated with collection and processing of evidence