Continuing Education Information Sheet

• Understand ransomware and the risks it entails
• Apply key technical risk management practices
• Address non-technical considerations including OFAC advisories and SEC disclosures
• Coordinate ransomware risk mitigation across business functions

Intended audience: Attorneys, IT, HR, and compliance professionals coordinating ransomware risk management.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Menachem Shafran, SVP, Strategy and Innovation, XM Cyber

  Menachem Shafran is Senior Vice President for Strategy and Innovation at XM Cyber, with more than 15 years of experience in product management and cybersecurity. He previously served five years in the Israel Defense Forces' Unit 8200, the military's elite intelligence unit, working as a researcher and team leader. His work centers on attack path management — how attackers actually move laterally through a network to reach critical assets — and he writes and speaks regularly on ransomware and cloud attack techniques. At Legal Cyber Academy he teaches on protecting an organization from ransomware risk.

• Tamara Snowdon, Head of Cyber Risk Wordings, Beazley

  Tamara Snowdon is a cyber insurance specialist and head of cyber risk wordings at Beazley. She was previously a Senior Vice President in Marsh's Cyber, Media and E&O practice and its Cyber Coverage Leader, where she developed tailored coverage solutions, managed insurer product relationships, and built alternative risk transfer programs including captives. Before joining Marsh she worked in the cyber and technology E&O national practice at Beecher Carlson, at the Federal Trade Commission, and in the Economic Crimes Bureau of the Queens County District Attorney's Office. At Legal Cyber Academy she teaches on protecting an organization from ransomware risk.

• Cory Simpson, Founder and CEO, Gray Space Strategies, Inc.

  Gray Space Strategies

  Cory Simpson is the founder and CEO of Gray Space Strategies, Inc., a professional services and strategic advisory firm based in Washington, D.C. He has over twenty years of experience across government, the military and the private sector, assisting clients in navigating the U.S. government, emerging technology markets, the cybersecurity ecosystem and national security. Before founding Gray Space Strategies he was a managing director at Ankura and an executive vice president at Resolute Strategic Services. He served on active duty in the Army Judge Advocate General's Corps from 2004 to 2016, spending most of that career as a general counsel in the special operations and airborne communities, a prosecutor and a national security law advisor, and he continues to serve in the Army Reserve as a legal advisor to the U.S. Army Cyber Command. He is a senior advisor to the Cyberspace Solarium Commission (CSC 2.0) and an adjunct senior fellow with the Technology and National Security Program at the Center for a New American Security. At Legal Cyber Academy, Cory Simpson teaches on cybersecurity executive orders and ransomware risk.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.