Taught by Scott Corzine
Law firms hold sensitive client data, privileged communications, and confidential deal information that make them high-value targets for cyber threat actors, including ransomware groups. This course introduces tabletop exercises as a structured, discussion-based method for testing how a firm would respond to a realistic cyber incident before one actually occurs. Participants will learn what a tabletop exercise involves, how to design one that reflects the threats most relevant to legal environments, and how to translate the results into concrete improvements in policies, roles, and response procedures. The course is designed to help law firm leadership and their advisors make informed decisions about whether and how to invest in this form of preparedness.
This course is most relevant to law firm executives and managing partners, CISOs and security teams supporting legal organizations, and legal advisors who counsel law firms on cyber risk and incident preparedness.
None — designed for non-technical professionals.
1. Introduction
Free preview
Managing Director, Cybersecurity, Technology Risk and Privacy, CohnReznick
CohnReznick
Scott Corzine is a Managing Director in the Cybersecurity, Technology Risk, and Privacy practice at CohnReznick. He advises organizations on cyber risk management, resilience, and privacy strategy.
RansomwareThis program covers how organizations can reduce ransomware risk through a combination of technical preparation, legal strategy, and governance—including defining stakeholder roles, aligning policies with regulatory requirements, conducting cyber risk assessments, and evaluating cyber insurance coverage. Speakers Daniel B. Garrie and Chris Campbell walk through the current threat landscape and offer practical, non-technical guidance that legal advisors, executives, and security teams can apply across an organization.
RansomwareTechnical and legal experts explain how ransomware works and what today's threat environment looks like, covering practical risk management steps—including tabletop exercises, OFAC guidance on ransom payments, and disclosure obligations under the 2023 SEC cybersecurity rules. The session closes with cross-functional strategies for reducing ransomware exposure across the organization.
Daniel B. Garrie
RansomwareThis seminar covers the ransomware threat landscape alongside both technical and legal risk-management approaches, including cyber risk assessments, regulatory compliance, corporate policy, stakeholder roles during an incident, and cyber insurance considerations. It closes with practical organizational strategies for reducing ransomware exposure.
Daniel B. Garrie