Continuing Education Information Sheet

• Explain data breaches and the current cybersecurity threat landscape
• Distinguish a cyber-attack from a data breach and internal from external threats
• Summarize the current regulatory landscape including the new SEC cyber rules
• Analyze post-breach litigation, liability, and insurance coverage

Intended audience: Legal professionals seeking combined legal and technical understanding of cybersecurity and the cyber regulatory landscape.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Bridget Choi, Cyber Insurance Executive

  Bridget Quinn Choi is a cyber insurance executive, attorney, and consultant with extensive experience guiding clients through cyber incidents. She has served as head of cyber underwriting for North America at a major cyber insurance carrier and as Director of Incident Response for Booz Allen Hamilton, and previously worked as General Counsel and Managing Director of Strategy for an incident response company, where she managed teams that negotiated with attackers and facilitated ransom payments. Earlier in her career she served as cyber claims counsel at several insurance companies and practiced law in New York. She earned her Juris Doctor from New York Law School.

• Brian Kill, Senior Vice President, Director of Cyber, Alliant Insurance Services

  Alliant Specialty Insurance Services

  Brian Kill is Senior Vice President, Director of Cyber on the law firms team at Alliant Insurance Services, based in New York. He specializes in placing professional liability, employment practices liability and management liability, as well as cyber insurance, for mid-to-large size law firms. He has spoken about claims trends affecting law firms, noting that data breach class actions are up sharply and describing an unusual policy exclusion he encountered for wire fraud liability. He advises clients facing an incident to call their breach coach immediately so that the vendors on the insurer's panel are engaged, rather than retaining providers independently. He attended Fordham University. At Legal Cyber Academy he teaches on phishing and on data breaches, cybersecurity regulation and ensuing litigation.

• Joshua Mooney, Partner and Head of Cyber and Data Privacy, US, Kennedys

  Joshua Mooney is a partner at Kennedys in Philadelphia and head of the firm's US Cyber and Data Privacy practice. Working within the firm's 24/7 global breach response service, he coordinates incident response and recovery across North America for healthcare providers, universities, financial services firms, professional sports franchises and law firms. He also defends data breach, online tracking and VPPA class actions, and has won two cases of first impression before the U.S. Court of Appeals for the Third Circuit. He earned his J.D. magna cum laude from Georgetown University Law Center, where he was elected to the Order of the Coif, and holds an MPhil from Girton College, Cambridge. He was founding chair of the Pennsylvania Bar Association's Cybersecurity and Data Privacy Committee and served for several years as a vice chair of the ABA TIPS committee of the same name. At Legal Cyber Academy, Joshua Mooney teaches on data breaches, cybersecurity regulation, and the litigation that follows.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.