Continuing Education Information Sheet

• Describe the CISO role and function within an organization
• Recognize the increasing legal scrutiny facing CISOs
• Apply deposition fundamentals to technical witnesses
• Employ best practices for deposing CISOs and navigate the Apex Doctrine

Intended audience: Litigators, compliance officers, and executives handling technology-related litigation.

Level: advanced

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Andrew Pak, Senior Counsel

  Perkins Coie LLP · U.S. Department of Justice (former)

  Andrew S. Pak is Senior Counsel at Perkins Coie LLP, where he advises businesses on cybersecurity, data protection, compliance, and technically complex litigation. A former federal prosecutor and cybercrime coordinator with the U.S. Department of Justice and former in-house counsel to a Fortune 500 financial institution, he counsels clients on cyber risk, incident response, privacy, internal investigations, and regulatory matters. He is a Certified Information Systems Security Professional (CISSP), combining legal and practitioner-level cybersecurity expertise.

• Michael Geibelson, Partner, Robins Kaplan LLP

  Robins Kaplan LLP

  Michael A. Geibelson is a partner at Robins Kaplan LLP, where his practice spans business, class action, trade secret, trademark and advertising, real estate, and privacy and cybersecurity litigation. He served as managing partner of the firm's Los Angeles and Silicon Valley offices from 2015 until February 2025, when Jason Fair succeeded him; the firm said Geibelson would continue to play a key role in its leadership while focusing on client service and high-exposure trial work. He is a past chair of the California State Bar's Litigation Section and of the Los Angeles Lawyer editorial board, a fellow of the American College of Real Estate Lawyers, and a past president of the Disability Rights Legal Center. He holds a J.D. from Loyola Law School, Los Angeles. At Legal Cyber Academy he teaches on eDiscovery and legal ethics, and on courtroom strategy for deposing CISOs.

• Amy Mushahwar, Partner

  Alston & Bird LLP

  Amy Mushahwar is a partner on the Privacy, Cyber & Data Strategy team at Alston & Bird LLP. With more than 20 years of experience in technology, she focuses on data security, cyber risk, privacy, and emerging technologies. She advises clients on proactive data security, data breach incident response, and regulatory compliance, and has handled security incidents involving federal and state agencies and forensic providers, overseeing investigations and designing post-incident notification and remediation plans.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.