Continuing Education Information Sheet

• Understand the cyber threats law firms face and the data being targeted
• Apply relevant cybersecurity guidance and regulations
• Learn from recent law-firm data breaches
• Use risk assessments and tabletop exercises to mitigate risk

Intended audience: Attorneys and staff at firms of all sizes managing their practice's cyber risk.

Level: beginner

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Rhea Siers, Senior Advisor, Cybersecurity Risk and Policy Issues, Teneo Risk Advisory

  Teneo · National Security Agency (former) · George Washington University

  Rhea Siers is a senior advisor on cybersecurity risk and policy issues at Teneo Risk Advisory, where she counsels C-suite executives on cyber issues. She spent three decades at the National Security Agency (1981-2012), serving as an attorney and counsel in its Office of General Counsel, Deputy Associate Director for Policy and Strategic Communications, and NSA's senior representative to the FBI. She later led cyber security defense strategy at Bank of America and was senior counsel in the cybersecurity practice at Zeichner, Ellman and Krause. Siers is adjunct faculty at George Washington University's Elliott School of International Affairs and at Johns Hopkins University, was Scholar in Residence at GW's Center for Cyber and Homeland Security, and co-authored Cyberwarfare: Understanding the Law, Policy and Technology. At Legal Cyber Academy, Rhea Siers teaches on the current state of cyber threats and whether organizations should run tabletop exercises.

• Scott Corzine, Board-Level Strategic Advisor, Corzine Global Advisors, LLC

  Corzine Global Advisors, LLC

  Scott Corzine is a board-level strategic advisor and board member who works through Corzine Global Advisors, LLC, having previously served as a managing director in CohnReznick's Cybersecurity, Technology Risk and Privacy practice. He advises boards and senior management on cyber resilience, operational risk, governance, compliance strategy and cybersecurity readiness for M&A, working with private sector entities in multiple sectors, universities, not-for-profits, and state and federal government organisations in the U.S. and abroad. He established and managed the cybersecurity and operational risk management practices at Risk Solutions International, LLC, FTI Consulting, Ankura Consulting and CohnReznick Advisory, LLC, and has helped manage a series of early-stage technology and business services ventures to successful exits as a senior executive, CEO and board member. At Legal Cyber Academy he teaches on the current state of cyber threats and tabletop exercises.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.