Continuing Education Information Sheet

• Define zero-day exploits and how they differ from other attacks
• Understand the broader cybersecurity threat landscape
• Explain CFAA protections against computer crime
• Apply methods and incident response planning to defend against zero-days

Intended audience: Attorneys and security-conscious professionals seeking to understand and defend against zero-day threats.

Level: intermediate

Prerequisites: None

• Daniel B. Garrie, Founder, Law & Forensics; Neutral at JAMS; Faculty at Harvard

  Law & Forensics LLC · JAMS · Harvard · Rutgers Law School · Journal of Law & Cyber Warfare

  Daniel B. Garrie is the founder and executive managing partner of Law & Forensics LLC, a boutique cybersecurity and forensic engineering firm he co-founded in 2008. He serves as a neutral, arbitrator, and forensic special master at JAMS, focusing on cybersecurity, cryptocurrency, and complex technology disputes, and holds faculty appointments at Harvard and Rutgers Law School. A patented software inventor and prolific author, he is editor-in-chief of the Journal of Law & Cyber Warfare and a widely cited authority on computer forensics, eDiscovery, and cyber litigation.

• Anahi Santiago, Chief Information Security Officer, ChristianaCare

  ChristianaCare

  Anahi Santiago is Chief Information Security Officer at ChristianaCare, where she holds overall responsibility for the health system's information security program and its strategic direction, leading a team that manages risk, implements policies and controls and builds security awareness across the organization. She has more than 20 years in information technology, spanning cybersecurity, privacy, regulatory compliance, program management and infrastructure services. She holds a B.S. in electrical and computer engineering and an executive MBA from Drexel University and is a Certified Information Security Manager (CISM). At Legal Cyber Academy she teaches on zero-day exploits and cybersecurity challenges.

• David Khalily, Senior Privacy & AI Counsel, Legal Department, Harvey AI

  David Khalily is a privacy and data security lawyer in New York. He is Senior Privacy & AI Counsel in the legal department at Harvey AI, and holds the CIPP/US and CIPM certifications. He came to that role after four years at FanDuel, the sports-betting and daily fantasy sports operator, which hired him in May 2022 as its Director of Privacy and Data Security, joining from Société Générale SA; he rose there to Counsel and Senior Director of Privacy and Data Security, building and leading a privacy function at the intersection of technology, sports and entertainment. He speaks on emerging privacy questions, including a September 2026 IAPP webinar on scoping automated decision-making technology ahead of California's ADMT compliance deadline. At Legal Cyber Academy, David Khalily teaches on zero-day exploits and the cybersecurity challenges they create for organizations.

Legal Cyber Academy is not an accredited provider; the notes below explain how a learner may self-submitthis activity where their board permits. The pathways shown reflect this course’s subject matter. Always confirm your board’s current rules.

• CLE (attorneys)up to 1.0 hr (60-min basis)

  Many U.S. jurisdictions let an attorney apply for CLE credit for a non-accredited program (often called individual attorney or self-application). Use this certificate plus the course Information Sheet as your supporting documentation. Your state bar or CLE board decides whether credit is granted, how much, and any self-study cap.

• CE / CPD (privacy, insurance, IT)up to 1.0 hr (60-min basis)

  Where your professional body recognizes self-reported or self-directed learning (CPD) — for example many privacy (CIPP/CIPM) and security certifications — record this activity using the certificate and Information Sheet. Confirm your program's self-reporting rules and any documentation it requires.