Decrypting Ransomware: Understanding, Mitigating, and Legal Implications
Today, cybersecurity risk management requires not only technical preparation, but also legal and strategic planning. Organizations must take a proactive approach that establishes clear and robust policies and procedures in response to these threats. This includes, among other critical factors, defining the roles and responsibilities of key stakeholders during a ransomware event, as well as ensuring compliance with relevant data protection and cyber incident laws. Today regulators are increasingly scrutinizing organizations for their cyber risk management practices, while cyber threat actors continue to target businesses for ransomware attacks, holding sensitive customer data or intellectual property hostage. Attorneys advising corporations of all sizes today will find this webinar a helpful guide in advising leadership, defining key risk management policies, and reducing their organization’s ransomware risk.
In this seminar, our expert panelists begin by providing an overview of ransomware and how it is used to conduct cyber-attacks, as well as an overview of the threat landscape and what information attackers seek and target. Next, our speakers give a brief overview of the technical risk management practices to implement against the threat of ransomware, followed by a deep dive into the non-technical strategies to follow. Among them are conducting cyber risk assessments, adhering to regulatory cybersecurity standards by adjusting corporate policies, and adequately purchasing cyber insurance coverage. Our experts conclude by highlighting the key strategies and practices to mitigate the threat of ransomware from the top down.
Our Mission is to bridge the knowledge gap between law and technology professionals by educating attorneys on technology to attorneys and technology executives on its laws and regulations. Legal Cyber Academy provides a comprehensive tool and evolving knowledge base through exclusive insights from world class cybersecurity, privacy, web 3.0, forensic, and e-discovery legal and technical practitioners. Earn CLE, CPE, and CE credits. (Refunds are available if you do not receive credit) At Legal Cyber Academy We recognize that technology, the cybersecurity threats it faces, and relevant laws and regulation are rapidly evolving, presenting unique challenges and opportunities. Our platform is dedicated to empowering legal professionals with the skills and understanding necessary to navigate the complex landscape of technology in their field, enabling them to effectively advise clients, draft contracts, and navigate legal implications in a technology-driven world. Simultaneously, we strive to equip technology professionals with the legal knowledge they need to make informed decisions, ensure compliance with regulations, and limit liability. By fostering a deep understanding of legal frameworks, we hope to support technology professionals in creating innovative, compliant, and socially conscious technological advancements. Join us in our mission to reshape the way legal professionals and technology experts understand and interact with each other in a rapidly changing technical and legal landscape. Together, they will mitigate risk better, ensure compliance, and actively shape the future of technology and its accompanying laws.
LAW & FORENSICS LLC – FOUNDER; JAMS – NEUTRAL; HARVARD – ADJUNCT;
Danie Garrie, Esq., is the Co-Founder of Law & Forensics LLC, where he heads the Computer Forensics and digital discovery Cybersecurity teams. Daniel has been a dominant voice in the computer forensics and cybersecurity space for the past 20 years, as an attorney and technologist. He is an adjunct professor at Harvard for Computer Forensics, and prior to Law & Forensics, he successfully built and sold several technology start-up companies. Since co-founding Law & Forensics LLC in 2008, Daniel has built it into one of the leading boutique firms specializing in cybersecurity and forensic engineering. He is a mediator, arbitrator, and e-discovery special master for JAMS and is a partner and head of Cybersecurity practice at Zeichner, Ellman & Krause LLP. Daniel earned both a Bachelor’s and a Master’s degree in computer science from Brandeis University, as well as a J.D. from Rutgers Law School. Daniel has led cyber and forensic teams in some of the most visible and sensitive incidents in the United States. He and his team have worked globally for two of the top five banks and dozens of the largest private and public companies in the world. In addition, Daniel has been awarded several patents for advanced cybersecurity and forensic platforms he built with his team, including TableTop.AI, CustodyTrack.IO, and Forensic Scan. Daniel is also well-published in the cybersecurity space and has authored more than 200 articles and books. His work is cited by Black’s Law Dictionary 10th Ed. defining the terms 'software', 'internet', and 'algorithm'. Lastly, he has been recognized by several United States Supreme Court Justices for his legal scholarship and is a trusted source and thought leader for cybersecurity articles and opinions, cited over 500 times to date.
Director - Product Management | Palo Alto Networks
As a Director Product Management at Palo Alto Networks, Shraddha Patil has led the product vision, strategy, and roadmap for InfoSec, delivering innovative and impactful solutions for complex security challenges. She has over 13 years of experience in cybersecurity product management, working with diverse teams and stakeholders across the industry. Her core competencies include cybersecurity strategy, identity and access management, governance risk and compliance, cloud security, vulnerability management, data security, and cybersecurity frameworks. She has successfully built and launched GRC and identity products at Salesforce, where she also led the design and implementation of RPA, analytics, and tooling integration for GRC. She is passionate about empowering organizations and individuals to protect their data, privacy, and assets from cyber threats, and she enjoys coaching and mentoring others in this field.
Senior Vice President, CISO, Head of Technology | Bitsight
Christopher (Chris) Campbell serves as the Senior Vice President, Chief Information Security Officer, and Head of Technology for Bitsight. Not only does Chris ensure BitSight manages its own internal cyber risk, he also makes sure the right people and technology are in place to support IT and security initiatives. Prior to joining Bitsight, Chris was the CISO and Head of Infrastructure at FS Investments, a $76 billion asset management firm based in Philadelphia, PA. Prior to that, Chris led multiple teams at KeyBank, one of the nation’s largest bank-based financial services companies, where he executed technical information security strategy and was responsible for the Security Architecture, Engineering and Operations teams. Chris also has a background in financial services consulting performing security assessments for global clients.
CISO, Group Manager - Technology | Todd Corporation
As a seasoned inclusive digital executive with over 15 years of experience leading diverse teams in medium to large global organisations, James Blair has consistently driven impactful digital transformation initiatives while effectively managing cybersecurity risk in dual roles as CIO and CISO. His leadership is characterised by a proven track record in developing and implementing award-winning digital strategies that result in measurable step-change transformations, enhancing operational efficiencies and delivering tangible business value. With a strong background in safeguarding critical infrastructure at a national level, he brings a deep understanding of the evolving threat landscape. He has successfully implemented robust governance frameworks that significantly reduce cybersecurity risk and elevate digital maturity across the organisation.
Director | Integrated Cybersecurity Partners, LLC
Kurt Sanger served in the U.S. Marine Corps for over 23 years as a cyber operations attorney, criminal defense counsel and prosecutor, adviser to the Afghan National Army, international law instructor at the Marine Corps University and National Defense University, and as a planning officer with U.S. Central Command. He earned a degree in national security law from Georgetown University in 2015. From 2014 to 2017, Kurt was general counsel for U.S. Marine Corps Forces Cyberspace Command. He served with U.S. Cyber Command from 2017 to 2022, first as the lead attorney for plans, policy, domestic and international partnerships, and legislative affairs; later as lead attorney for operations and intelligence; and finally as the command’s deputy general counsel. He retired from the Marine Corps in November 2022. Kurt is founder and director of Integrated Cybersecurity Partners, LLC, an information technology and national security consultancy. He is also a cybersecurity board member and advisor for Cowbell Cyber Insurance and Batten Safe Corporation.
