Taught by Rhea Siers
A small but significant number of criminal prosecutions involving security executives have signaled a shift in how regulators and law enforcement view individual accountability for cybersecurity failures. This course examines the legal theories being applied, the circumstances that have drawn prosecutorial attention, and what distinguishes acceptable security leadership from conduct that has attracted criminal scrutiny. Participants will leave with a clearer picture of their personal exposure and a practical framework for protecting themselves while continuing to do their jobs effectively.
CISOs and security executives, executives, legal advisors, and board members who oversee or interact with the security function will benefit most from this course.
No technical background required — the course focuses on legal exposure and risk management practices rather than technical cybersecurity concepts.
1. A New Risk for CISOs: Criminal Liability
In this seminar, our expert panelists begin by reviewing the primary characteristics and responsibilities of the CISO role, highlighting their importance for organizations' cybersecurity and risk management. Our speakers then discuss the potential criminal issues that CISOs face, specifically for ransomware payments under OFAC and fraud claims under the False Claims Act and when facing regulatory inquiries. Our expert panelists conclude by reviewing a recent example of CISO criminal liability, US v. Joseph Sullivan (N.D. Cal. No. 20-cr-00337-WHO), and key takeaways for what it means for CISOs, their employers, and their counsel. Topics covered in this webinar: CISOs' Role in Cybersecurity and Data Privacy Potential Criminal Issues CISOs Face Case Study
Free preview
Senior Advisor, Cyber Risk, Teneo
Teneo · National Security Agency (former) · George Washington University
Rhea Siers is a senior advisor for cyber risk at Teneo and a former Deputy Assistant Director for Policy at the National Security Agency. She brings decades of national security and intelligence experience to questions of cyber risk, policy, and law, and teaches on these subjects at the university level.
CISO & CTOUsing the 2022 criminal conviction of Uber's former CISO Joseph Sullivan as a framework, this course walks board members, executives, legal advisors, and security leaders through the facts, charges, ruling, and key takeaways of U.S. v. Sullivan to clarify where a CISO's responsibilities and authority begin and end under the law. Attendees will come away with a clearer understanding of how this case shapes criminal liability exposure for security executives and the organizations that employ them.
CISO & CTO
CISO & CTOThis multi-part guidebook walks boards, CISOs, and their legal advisors through evolving regulatory responsibilities, fiduciary duties, and personal exposure, covering board-level cyber risk governance, SEC cybersecurity developments, the emerging criminal-liability landscape for CISOs, and practical guidance on CISO depositions.