Continuing Education Information Sheet

• Define the board's role in cybersecurity risk management
• Explain how the 2023 SEC rules increase board responsibilities
• Identify the critical elements of an incident response plan
• Address the key questions in the incident response planning process

Intended audience: Attorneys advising boards and senior executives on cybersecurity oversight and incident response.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Judith Germano, Founder, GermanoLaw LLC

  Germano Law LLC

  Judith H. Germano is the founding attorney of GermanoLaw LLC, advising companies and executives on cybersecurity, AI and privacy, complex civil fraud and white collar matters, regulatory compliance and investigations, and crisis and risk management. She is a distinguished fellow at the NYU Center for Cybersecurity, a senior fellow at NYU's Reiss Center on Law and Security, and an adjunct professor at NYU School of Law and NYU Stern School of Business. She was a federal prosecutor for 11 years and served as chief of economic crimes at the U.S. Attorney's Office for the District of New Jersey. She holds a J.D. from St. John's University School of Law and serves on the board of directors of Dime Community Bancshares, Inc. At Legal Cyber Academy, Judith Germano teaches on advising the board on cyber incident response planning.

• Shoshana Rosenberg, Founder, SafePorter

  WSP

  Shoshana Rosenberg is an attorney working in AI governance, privacy and emerging technology regulation, and the founder of SafePorter and a co-founder of Women in AI Governance. She has more than 16 years of experience in international data protection law, and spent nearly two decades building and leading privacy, data governance, and AI and technology governance programs at global professional services firms, most recently as Senior Vice President, Chief AI Governance and Privacy Officer at WSP. She also works with Logical AI Governance, created the PRISM framework for responsible AI, and is a U.S. Navy veteran and the author of Practical AI Governance (Kogan Page, 2026). At Legal Cyber Academy she teaches on advising the board on cyber incident response planning.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.