Continuing Education Information Sheet

• Describe the current cyber risk landscape and cybersecurity fundamentals
• Define the attorney's role in cyber risk management and incident response
• Apply recent SEC and FTC regulatory guidance and requirements
• Use cyber risk assessments to mitigate attacks

Intended audience: Counsel advising boards and businesses, and attorneys managing law firms.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Gwenn Cujdik, Manager, North America Cyber Incident Response Team, AXA XL

  AXA XL

  Gwenn Cujdik is manager of the North America Cyber Incident Response Team at AXA XL, where her team takes a holistic approach to assisting clients before, during and after a cyber incident — from pre-incident security work through remediation, restoration, investigation, notification and follow-up — convening specialists including breach coaches and forensic investigators when an incident occurs. She has assisted in hundreds of cyber events as a breach coach and cyber claims specialist. Before joining AXA XL she was a partner at Mullen Coughlin LLC, where she focused on data privacy and cybersecurity incident response and compliance. A former assistant district attorney in Philadelphia, she began her career prosecuting criminal cases. At Legal Cyber Academy, Gwenn Cujdik teaches on cyber incident response for boards and their counsel.

• James Blair, Group Manager Technology and Chief Information Security Officer, Todd Corporation

  Todd Energy

  James Blair is Group Manager Technology and Chief Information Security Officer at Todd Corporation, the New Zealand group that is the parent company of Todd Energy, which produces a third of the country's natural gas. Tasked with enhancing digital efficiency and working from a broad mandate, he has led significant IT standardisation and centralisation, reduced costs, built IT credibility and improved IT value and satisfaction metrics, using a first-100-days planning framework to reset and narrow the technology strategy and set out priorities and a clear roadmap. At Legal Cyber Academy, James Blair teaches on cyber incident response for boards and their counsel and on limiting an organisation's ransomware risk.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.