Counsel's How To: Advising the Board on Cyber Incident Response Planning

Overview of Counsel's How To: Advising the Board on Cyber Incident Response Planning

Panelists define the senior board's role in an organization's cybersecurity and how to execute it, then outline the 2023 SEC cyber rules and how they have increased board responsibilities. They discuss the important factors in a strong incident response plan and review the critical questions to answer throughout the planning process to ensure comprehensive coverage.

What you’ll learn in Counsel's How To: Advising the Board on Cyber Incident Response Planning

• Define the board's role in cybersecurity risk management
• Explain how the 2023 SEC rules increase board responsibilities
• Identify the critical elements of an incident response plan
• Address the key questions in the incident response planning process

Curriculum

1. 1. Understanding the Board's Role in Cybersecurity Risk Management

   The board's oversight role and how to execute it.

   Locked

2. 2. Mounting Technical and Regulatory Risks

   How the 2023 SEC rules increased board responsibilities.

   Video coming soon

3. 3. Critical Elements of the Incident Response Plan

   Important factors in a strong and thorough response plan.

   Video coming soon

4. 4. Questions to Answer During the Cyber Incident Response Planning Process

   Critical questions to ensure comprehensive planning.

   Video coming soon

Your instructors

Daniel B. Garrie

Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

Judith Germano

Founder, GermanoLaw LLC

Germano Law LLC

Judith H. Germano is the founding attorney of GermanoLaw LLC, advising companies and executives on cybersecurity, AI and privacy, complex civil fraud and white collar matters, regulatory compliance and investigations, and crisis and risk management. She is a distinguished fellow at the NYU Center for Cybersecurity, a senior fellow at NYU's Reiss Center on Law and Security, and an adjunct professor at NYU School of Law and NYU Stern School of Business. She was a federal prosecutor for 11 years and served as chief of economic crimes at the U.S. Attorney's Office for the District of New Jersey. She holds a J.D. from St. John's University School of Law and serves on the board of directors of Dime Community Bancshares, Inc. At Legal Cyber Academy, Judith Germano teaches on advising the board on cyber incident response planning.

Shoshana Rosenberg

Founder, SafePorter

WSP

Shoshana Rosenberg is an attorney working in AI governance, privacy and emerging technology regulation, and the founder of SafePorter and a co-founder of Women in AI Governance. She has more than 16 years of experience in international data protection law, and spent nearly two decades building and leading privacy, data governance, and AI and technology governance programs at global professional services firms, most recently as Senior Vice President, Chief AI Governance and Privacy Officer at WSP. She also works with Logical AI Governance, created the PRISM framework for responsible AI, and is a U.S. Navy veteran and the author of Practical AI Governance (Kogan Page, 2026). At Legal Cyber Academy she teaches on advising the board on cyber incident response planning.