Courses

Board Certificate Course

Cybersecurity Regulatory Guidebook for Boards, CISOs, and their Counsel

This multi-part guidebook walks boards, CISOs, and their legal advisors through evolving regulatory responsibilities, fiduciary duties, and personal exposure, covering board-level cyber risk governance, SEC cybersecurity developments, the emerging criminal-liability landscape for CISOs, and practical guidance on CISO depositions.

2023 Beta Board Cyber Readiness Certificate

This archive captures the 2023 beta cohort of Legal Cyber Academy's board-focused certificate program, delivered live over five weeks in September–October 2023 across six lectures organized into four modules covering cybersecurity fundamentals, regulatory oversight, risk management and incident response, and board oversight tools. The program prepared board members to understand core cybersecurity concepts, their individual responsibilities, and the regulatory landscape across SEC, FTC, NYDFS, and GDPR frameworks; core content and recordings are largely carried forward into the 2024 edition, with this beta distinguished by its live format, guest-speaker lineup, and supplemental materials.

Daniel B. Garrie

2024 Board Cyber Readiness Certificate

This online program delivers six live, expert-led lectures across four modules—covering cybersecurity fundamentals, regulatory oversight, risk management, incident response, and board-level governance tools—designed specifically for board members. Faculty drawn from regulatory, legal, insurance, and cybersecurity backgrounds help participants understand the technical, financial, and legal risks their organization faces, and how requirements from regulators such as the SEC, FTC, NYDFS, and GDPR are shaping board responsibilities.

Daniel B. Garrie

Managing Technical and Regulatory Cybersecurity Risks

Panelists cover how cyber threats work and what attackers typically target, then walk through the 2023 SEC cybersecurity rules and the distinct challenges facing private companies. The session also examines how breaches have affected law firms through real case examples and recommends regular risk assessments, including tabletop exercises, as a practical preparedness measure.

Daniel B. Garrie

Don't Gamble on Vendors: Strategies for Third-Party Cyber Risk Mitigation

Panelists examine how third-party vendors create cybersecurity and data protection risks for organizations, and outline practical steps—including vendor management programs and regular risk assessments—to address those risks. They also review the relevant regulatory environment and draw on a recent vendor data breach case study to illustrate key legal and operational considerations.

Daniel B. Garrie

10 Cybersecurity Practices to Adopt and Master

Panelists explain cybersecurity fundamentals and define data breaches to show why the topic matters across organizations, then outline ten cybersecurity best practices for securing sensitive data. The session closes on the value of proactive cyber risk assessments and how preparation can reduce the impact of a breach when one occurs.

Daniel B. Garrie

Byte by Byte: What You Should Know About Software and Programming

Panelists break down how software and programming work, covering key distinctions between programming languages and their role in machine learning. The session then explores how the internet functions as a network, offering practical context for anyone advising on, overseeing, or insuring technology-related matters.

Daniel B. Garrie

From Cybersecurity to Courtroom Strategy: Guide to Deposing CISOs

This session covers the CISO role and the information CISOs can provide in litigation, using the Uber CISO case and the SolarWinds Wells Notice to illustrate growing legal and regulatory exposure. It also reviews deposition fundamentals, practical guidance for deposing CISOs in technical cases, and how the Apex Doctrine applies in this context.

Daniel B. Garrie

Cybercrime and Punishment: Understanding the U.S. v. Joe Sullivan Trial

This seminar walks through the facts, charges, verdict, and sentencing in U.S. v. Joseph Sullivan, the criminal case stemming from Uber's 2016 data breach and the alleged cover-up by its CISO. Panelists draw out the key takeaways for executives, security leaders, legal advisors, and others who want to understand what the case means for personal criminal liability in the aftermath of a data breach.

Daniel B. Garrie

A New Risk for CISOs: Criminal Liability

How recent criminal prosecutions are changing the personal legal exposure facing security executives, and practical steps to manage that risk.

Rhea Siers