Continuing Education Information Sheet

• Explain the SEC's 2023 cybersecurity rules and their motivations
• Identify the reporting requirements and board responsibilities
• Balance disclosure obligations against trade secret risk
• Apply best practices for compliance

Intended audience: Attorneys, board members, and executives at public companies navigating SEC cyber disclosure.

Level: advanced

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Michelle Tanney, Partner, BakerHostetler

  BakerHostetler

  Michelle N. Tanney is a partner in BakerHostetler's New York office, practicing in commercial litigation, securities and governance litigation, white collar investigations and securities enforcement, and compliance and enterprise risk management. She represents public companies and executives in civil litigation and regulatory enforcement before the SEC, the Department of Justice and FINRA, and advises on emerging technologies including artificial intelligence, where she focuses on balancing innovation with compliant execution. Earlier in her career she was an associate at the firm representing Irving H. Picard, the SIPA trustee for the liquidation of Bernard L. Madoff Investment Securities LLC. A 2012 graduate of Albany Law School, she was named to Attorney Intel's Top 25 Blockchain and Digital Assets Attorneys of 2025. At Legal Cyber Academy she teaches on the SEC's cyber disclosure rules and the risk they pose to trade secrets.

• David Anderson, Vice President, Cyber Liability, Woodruff Sawyer

  Woodruff Sawyer

  As of 2026, David Anderson is Vice President, Cyber Liability at Woodruff Sawyer, which Arthur J. Gallagher & Co. acquired in April 2025. He focuses on complex cyber, privacy, technology and professional liability issues. His experience spans risk assessment, pre-breach network security risk discovery and risk management, and hands-on post-incident client support and claims advocacy, and he helps clients navigate the cyber and professional liability insurance marketplace to reach market-leading coverage terms and conditions at the best possible premium. His career began in the branches of several large banks, moved into management liability at a commercial insurance broker, and from there into cyber insurance, where he has built a practice rooted in transparency, trust and client education — as he puts it, cyber policies do not cover everything, so a broker has to help clients understand "where the four walls of coverage are and where they're not." He holds the CIPP/US certification, is a member of ISMG's CyberEdBoard, and has spoken on cyber risk at SecureWorld conferences. At Legal Cyber Academy, David Anderson teaches on the SEC cyber rules and balancing disclosure against the risk to trade secrets.

• Sean McTigue, Partner, Bartko Pavia LLP

  Bartko Pavia LLP

  Sean R. McTigue is a partner in the litigation and intellectual property practices of Bartko Pavia LLP in San Francisco. He handles complex commercial disputes involving trade secrets, intellectual property and corporate governance, including matters where the key evidence is technical, such as source code, forensic device imaging and data-driven software systems. He helped secure an $845 million trade secret judgment in ASML US, Inc. v. Xtal, Inc. and a $222.7 million trade secret verdict in Zest Labs, Inc. v. Wal-Mart Inc. He holds a J.D. from the University of California, Berkeley School of Law and an honors bachelor's degree from the University of Utah. At Legal Cyber Academy he teaches on the SEC cyber rules and balancing disclosure against the risk to trade secrets.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.3 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.