From Cybersecurity to Courtroom Strategy: Guide to Deposing CISOs

Overview of From Cybersecurity to Courtroom Strategy: Guide to Deposing CISOs

Panelists introduce the role of the Chief Information Security Officer and the insights they provide, then highlight rising legal and regulatory scrutiny through the Uber CISO case and the SolarWinds Wells Notice. The session reviews deposition fundamentals, best practices for deposing CISOs in technically complex contexts, and the Apex Doctrine.

What you’ll learn in From Cybersecurity to Courtroom Strategy: Guide to Deposing CISOs

• Describe the CISO role and function within an organization
• Recognize the increasing legal scrutiny facing CISOs
• Apply deposition fundamentals to technical witnesses
• Employ best practices for deposing CISOs and navigate the Apex Doctrine

Curriculum

1. 1. From Cybersecurity to Courtroom Strategy: Guide to Deposing CISOs​

   As cyber threats and information security practices are now frequently the subject of litigations, attorneys must increasingly engage with organizations’ technical executives. One of these key figures is the Chief Information Security Officer (CISO). Developing the ability to understand and communicate with these technical experts and their subject matter can significantly influence the effectiveness of your representation. This seminar presents an opportunity for attorneys to gain a deep understanding of the role of CISO role and equip them with the skills to confidently navigate the deposition process, even in technically complex contexts. What You Will Learn from the Seminar In this seminar, our panelists begin by introducing the role of CISOs, their function within an organization,

   Locked

Your instructors

Daniel B. Garrie

Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

Andrew Pak

Senior Counsel

Perkins Coie LLP · U.S. Department of Justice (former)

Andrew S. Pak is Senior Counsel at Perkins Coie LLP, where he advises businesses on cybersecurity, data protection, compliance, and technically complex litigation. A former federal prosecutor and cybercrime coordinator with the U.S. Department of Justice and former in-house counsel to a Fortune 500 financial institution, he counsels clients on cyber risk, incident response, privacy, internal investigations, and regulatory matters. He is a Certified Information Systems Security Professional (CISSP), combining legal and practitioner-level cybersecurity expertise.

Michael Geibelson

Partner, Robins Kaplan LLP

Robins Kaplan LLP

Michael A. Geibelson is a partner at Robins Kaplan LLP, where his practice spans business, class action, trade secret, trademark and advertising, real estate, and privacy and cybersecurity litigation. He served as managing partner of the firm's Los Angeles and Silicon Valley offices from 2015 until February 2025, when Jason Fair succeeded him; the firm said Geibelson would continue to play a key role in its leadership while focusing on client service and high-exposure trial work. He is a past chair of the California State Bar's Litigation Section and of the Los Angeles Lawyer editorial board, a fellow of the American College of Real Estate Lawyers, and a past president of the Disability Rights Legal Center. He holds a J.D. from Loyola Law School, Los Angeles. At Legal Cyber Academy he teaches on eDiscovery and legal ethics, and on courtroom strategy for deposing CISOs.

Amy Mushahwar

Partner

Alston & Bird LLP

Amy Mushahwar is a partner on the Privacy, Cyber & Data Strategy team at Alston & Bird LLP. With more than 20 years of experience in technology, she focuses on data security, cyber risk, privacy, and emerging technologies. She advises clients on proactive data security, data breach incident response, and regulatory compliance, and has handled security incidents involving federal and state agencies and forensic providers, overseeing investigations and designing post-incident notification and remediation plans.