Continuing Education Information Sheet

• Understand the SolarWinds attack, its methods and scope
• Explain the regulatory response and SEC disclosure rules
• Assess the executive and CISO liability implications of the Wells Notice
• Apply best practices to mitigate cyber risk and executive exposure

Intended audience: Attorneys, compliance officers, and executives advising on cybersecurity, securities disclosure, and executive liability.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Rick Borden, Senior Director and Assistant General Counsel — Privacy, Cybersecurity, AI and Patents, JFrog

  Frankfurt Kurnit Klein & Selz

  Rick Borden is a privacy and data security lawyer in New York. He is senior director and assistant general counsel for privacy, cybersecurity, AI and patents at the software platform JFrog, which he joined in 2025. He was previously a partner in the Data Strategy, Privacy & Security Group at Frankfurt Kurnit Klein & Selz, which he joined in September 2022 from Willkie Farr & Gallagher, and he has also served in-house as a chief privacy officer. His practice has centered on FinTech, InsurTech, cloud computing and other tech-forward companies, advising on technology transactions and representing them in regulatory disputes, including high-profile investigations before the New York State Department of Financial Services and other agencies. He sits on the board of editors of the Journal of Law and Cyber Warfare and has taught information governance, cyber warfare and cybersecurity at the University of Connecticut School of Law, the Benjamin N. Cardozo School of Law and Rutgers Law School. At Legal Cyber Academy he teaches on the SolarWinds Wells Notice and cybersecurity enforcement.

• Craig Martin, Partner, Morrison Foerster

  Morrison & Foerster LLP

  Craig D. Martin is a partner in Morrison Foerster's San Francisco office, where his practice covers investigations and white collar defense, securities enforcement, securities litigation, and public company advisory and governance. He is co-chair of the firm's Investigations + White Collar Defense practice and was the firm's firmwide managing partner from 2012 to 2022. He was an enforcement attorney in the SEC's San Francisco Regional Office from 1999 to 2002, where he worked on financial accounting fraud and insider trading matters and led one of the largest insider trading cases in the agency's history, in which 15 individuals were charged. He holds a J.D. from Stanford Law School and a B.A. from the University of California, Berkeley. At Legal Cyber Academy he teaches on the SolarWinds Wells notice and SEC cybersecurity enforcement.

• Lana Yang, Senior Counsel and Senior Manager of Information Governance, Security and Privacy

  Lana Yang is senior counsel and senior manager of information governance, security and privacy, working on information governance programmes, data security and privacy compliance within a corporate legal department. She holds the International Association of Privacy Professionals' CIPP/US, CIPP/E, CIPM, CIPT and AI Governance Professional certifications, and studied law at Columbia Law School. At Legal Cyber Academy she teaches on the SolarWinds Wells Notice and cybersecurity enforcement.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• Finance/securities subject matter — may support CPE where your state board accepts non-NASBA-registered activities.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.

• CPE (accountants)up to 1.2 hr (50-min basis)

  NASBA CPE uses a 50-minute credit hour and has strict self-study standards (registered sponsors, word-count-per-credit, and qualifying review questions). This course is NOT a NASBA-registered self-study program. Some state boards accept non-registered activities at their discretion — verify with your board before claiming CPE.