2024 ACC Foundation Cyber Security Summit
-
Register
- Non-member - $295
- Member - $295
Cybersecurity touches every aspect of consumer and corporate culture, and vulnerabilities present grave financial, legal, and reputational risks. Preventing, preparing for, and responding to data breaches in real time are chief concerns in today’s workforce. This recorded conference programming will keep you apprised of the latest threats and innovations through educational sessions with leading subject matter experts. These learning opportunities will complement your broad understanding of cybersecurity strategies and principles, enabling you to become a more well-rounded, focused, and effective practitioner.The program is geared towards law firms, corporations, and government officials.
-
Contains 2 Component(s) Recorded On: 03/25/2024
Join us as we kick off this year's Cybersecurity Summit with a fireside chat between Mark Korman of Sygnia and U.S. Cyber Command General Counsel, Peter Hayden.
Join us as we kick off this year's Cybersecurity Summit with a fireside chat between Mark Korman of Sygnia and U.S. Cyber Command General Counsel, Peter Hayden.
Aileen Cronin
SVP Business Integrity & Chief Privacy Officer
F5, Inc.
AILEEN CRONIN is a recognized leader in data privacy, information governance, responsible AI, and risk management. She is an integral member of the senior leadership team, helping drive strategy and priorities for F5’s customers and products. Her extensive legal expertise in data privacy, responsible AI and enterprise risk, combined with her collaborative & transparent style, delivers powerful results.
As Chief Privacy Officer, Aileen has 3 primary responsibilities:
1. Design, implement and operate F5’s enterprise data privacy and responsible AI programs 2. Establish company-wide standards and programs for products and services
3. Showcase to customers and partners how F5 technologies leverage and use the power of data
Before joining F5, Aileen was Associate General Counsel, Managing Director, Information Management & Complaince of Alaska Airlines where she led the enterprise privacy, compliance and risk management programs. She brings more than 25 years of experience both as a Chief Privacy Officer and compliance and risk management leader.Aileen has a JD from Gonzaga University School of Law and a bachelor’s degree in Communications from the University of California, San Diego.
Mark Korman
Vice President and General Counsel
Sygnia
Mark Korman serves as Vice President and General Counsel of Sygnia, a leading global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With nearly two decades of experience at the intersection of corporate and technology law, Mark has played a pivotal role in Sygnia’s remarkable growth and expansion, helping the company secure a meaningful market share in the cybersecurity sector. In his role, Mark leads a legal team responsible for privacy and security, corporate governance, commercial, compliance, employment, intellectual property, and more. He also partners with key stakeholders of Sygnia’s cybersecurity delivery team when dealing with complex client engagements. Mark’s leadership and legal acumen have been instrumental in shaping Sygnia’s business and legal strategy, ensuring compliance, while driving innovation and thought leadership. Mark's expertise spans a wide array of disciplines, from orchestrating complex cross-border transactions to crafting sophisticated licensing agreements and spearheading mergers and acquisitions. He is proficient in navigating data privacy and security regulations, and has a deep understanding of U.S. securities laws, having provided strategic counsel to Israeli companies on SEC and NASDAQ compliance matters and other pivotal corporate and securities issues. Prior to joining Sygnia, Mark served as the Director of Legal Affairs at Zerto, an HPE company, where he further refined his strategic acumen through invaluable in-house experience. Before this, he spent seven years at Goldfarb Gross Seligman, Israel’s leading law firm, where he honed his skills in navigating complex legal landscapes. Mark was chosen to be on the Legal 500 2023 GC Powerlist, holds a master’s degree in international commercial law from Hebrew University/Georgetown University, and holds a Black Duck Legal Specialist Certificate.
Michael Montoya
Senior Vice President, Chief Information Security Officer
Equinix
As the Chief Information Security Officer for Equinix, Michael is responsible for leading Equinix's Trust and Security programs. His responsibilities include leading the company's Trust programs, information and cyber security strategy, cyber security risk management and compliance programs. Michael oversees Equinix's security across product development, Operations, IT, compliance and business continuity teams to assure the company has a world-class approach to securing its global assets as well as providing the most secure and compliant environment for over 10k customers and partners in over 250 global datacenters and 400K interconnections.
Michael has extensive experience in enterprise IT support and has held several executive roles with Microsoft, Fireeye and EMC. He has extensive experience overseeing global cybersecurity programs and advising large enterprises, governments and regulators across global markets. His roles include:• Microsoft holding various leadership roles including Regional CIO for Asia and EMEA, Asia Chief Cybersecurity Officer, and Global Director of Cloud Internet and Security Operations.
• Fireeye serving as Vice President of Cloud and Intelligence Services leading all cloud-security operations supporting FireEye’s threat intelligence backbone and cloud services of Threat Analytics Platform, Email Threat Prevention, Mobile Threat Platform and Cloud Endpoint Security.
• EMC serving as an IT and Services Leader responsible for their EMC Proven platform resulting in a CIO100 industry recognitions, and digital transformation programs securely digitizing over 200+ enterprise processes.
• Digital Realty where he served as Senior Vice President and Chief Information Security Officer.
Michael is an industry recognized innovative IT and Security leader and serves as an Independent Director to F5 Networks and Sygnia, as well as an advisor to several security and IT startups and venture capital firms.
Michael has dual degrees in Economics and Political Science from the University of New Mexico.Jena Valdetero
Shareholder
Greenberg Traurig, LLP
Jena M. Valdetero serves as Co-Chair of the firm’s U.S. Data Privacy and Cybersecurity Practice where she advises clients on complex data privacy and security issues. She has led more than 1,000 data breach investigations. A litigator by background, Jena defends companies against privacy and data breach litigation, with an emphasis on class action lawsuits. She has designed and conducted dozens of data breach tabletop exercises to empower clients to respond effectively to a data security incident. She also counsels companies on data privacy and security compliance programs and advises on privacy and cyber risks associated with mergers and acquisitions, venture capital, and securities. Jena also advises a diverse array of clients on compliance with existing and emerging privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Gramm Leach Bliley Act (GLBA), and the Health Insurance Portability and Accountability Act (HIPAA). She is a certified privacy professional through the International Association of Privacy Professionals (CIPP/US), for which she is a former KnowledgeNet Co-Chair.
-
Contains 2 Component(s) Recorded On: 03/25/2024
This session will explore the relationship between the general counsel, the chief information security officer, and the board and how these corporate leaders must navigate their company through the risks presented by cybersecurity and data privacy issues.
Cybersecurity is a team sport. The legal department must work cross-functionally with other corporate departments and the board is increasing its oversight of cybersecurity issues. This session will explore the relationship between the general counsel, the chief information security officer, and the board and how these corporate leaders must navigate their company through the risks presented by cybersecurity and data privacy issues.
Aileen Cronin
SVP Business Integrity & Chief Privacy Officer
F5, Inc.
AILEEN CRONIN is a recognized leader in data privacy, information governance, responsible AI, and risk management. She is an integral member of the senior leadership team, helping drive strategy and priorities for F5’s customers and products. Her extensive legal expertise in data privacy, responsible AI and enterprise risk, combined with her collaborative & transparent style, delivers powerful results.
As Chief Privacy Officer, Aileen has 3 primary responsibilities:
1. Design, implement and operate F5’s enterprise data privacy and responsible AI programs 2. Establish company-wide standards and programs for products and services
3. Showcase to customers and partners how F5 technologies leverage and use the power of data
Before joining F5, Aileen was Associate General Counsel, Managing Director, Information Management & Complaince of Alaska Airlines where she led the enterprise privacy, compliance and risk management programs. She brings more than 25 years of experience both as a Chief Privacy Officer and compliance and risk management leader.Aileen has a JD from Gonzaga University School of Law and a bachelor’s degree in Communications from the University of California, San Diego.
Mark Korman
Vice President and General Counsel
Sygnia
Mark Korman serves as Vice President and General Counsel of Sygnia, a leading global cyber readiness and response team, applying creative approaches and battle-tested solutions to help organizations beat attackers and stay secure. With nearly two decades of experience at the intersection of corporate and technology law, Mark has played a pivotal role in Sygnia’s remarkable growth and expansion, helping the company secure a meaningful market share in the cybersecurity sector. In his role, Mark leads a legal team responsible for privacy and security, corporate governance, commercial, compliance, employment, intellectual property, and more. He also partners with key stakeholders of Sygnia’s cybersecurity delivery team when dealing with complex client engagements. Mark’s leadership and legal acumen have been instrumental in shaping Sygnia’s business and legal strategy, ensuring compliance, while driving innovation and thought leadership. Mark's expertise spans a wide array of disciplines, from orchestrating complex cross-border transactions to crafting sophisticated licensing agreements and spearheading mergers and acquisitions. He is proficient in navigating data privacy and security regulations, and has a deep understanding of U.S. securities laws, having provided strategic counsel to Israeli companies on SEC and NASDAQ compliance matters and other pivotal corporate and securities issues. Prior to joining Sygnia, Mark served as the Director of Legal Affairs at Zerto, an HPE company, where he further refined his strategic acumen through invaluable in-house experience. Before this, he spent seven years at Goldfarb Gross Seligman, Israel’s leading law firm, where he honed his skills in navigating complex legal landscapes. Mark was chosen to be on the Legal 500 2023 GC Powerlist, holds a master’s degree in international commercial law from Hebrew University/Georgetown University, and holds a Black Duck Legal Specialist Certificate.
Michael Montoya
Senior Vice President, Chief Information Security Officer
Equinix
As the Chief Information Security Officer for Equinix, Michael is responsible for leading Equinix's Trust and Security programs. His responsibilities include leading the company's Trust programs, information and cyber security strategy, cyber security risk management and compliance programs. Michael oversees Equinix's security across product development, Operations, IT, compliance and business continuity teams to assure the company has a world-class approach to securing its global assets as well as providing the most secure and compliant environment for over 10k customers and partners in over 250 global datacenters and 400K interconnections.
Michael has extensive experience in enterprise IT support and has held several executive roles with Microsoft, Fireeye and EMC. He has extensive experience overseeing global cybersecurity programs and advising large enterprises, governments and regulators across global markets. His roles include:• Microsoft holding various leadership roles including Regional CIO for Asia and EMEA, Asia Chief Cybersecurity Officer, and Global Director of Cloud Internet and Security Operations.
• Fireeye serving as Vice President of Cloud and Intelligence Services leading all cloud-security operations supporting FireEye’s threat intelligence backbone and cloud services of Threat Analytics Platform, Email Threat Prevention, Mobile Threat Platform and Cloud Endpoint Security.
• EMC serving as an IT and Services Leader responsible for their EMC Proven platform resulting in a CIO100 industry recognitions, and digital transformation programs securely digitizing over 200+ enterprise processes.
• Digital Realty where he served as Senior Vice President and Chief Information Security Officer.
Michael is an industry recognized innovative IT and Security leader and serves as an Independent Director to F5 Networks and Sygnia, as well as an advisor to several security and IT startups and venture capital firms.
Michael has dual degrees in Economics and Political Science from the University of New Mexico.Jena Valdetero
Shareholder
Greenberg Traurig, LLP
Jena M. Valdetero serves as Co-Chair of the firm’s U.S. Data Privacy and Cybersecurity Practice where she advises clients on complex data privacy and security issues. She has led more than 1,000 data breach investigations. A litigator by background, Jena defends companies against privacy and data breach litigation, with an emphasis on class action lawsuits. She has designed and conducted dozens of data breach tabletop exercises to empower clients to respond effectively to a data security incident. She also counsels companies on data privacy and security compliance programs and advises on privacy and cyber risks associated with mergers and acquisitions, venture capital, and securities. Jena also advises a diverse array of clients on compliance with existing and emerging privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Gramm Leach Bliley Act (GLBA), and the Health Insurance Portability and Accountability Act (HIPAA). She is a certified privacy professional through the International Association of Privacy Professionals (CIPP/US), for which she is a former KnowledgeNet Co-Chair.
-
Contains 2 Component(s)
In the world of cybersecurity incident response, preparation is key. We are here to help you prepare.
2023 was the year that cybersecurity regulations have exploded. In addition to responding to cybersecurity incidents at a technical level, companies must also develop sophisticated response plans for meeting regulatory and business needs. But how well prepared is your organization for responding effectively to the technical elements of an attack, as well as the legal ramifications? Join us as we walk through the A-B-Cs of planning a response to this fast-growing threat. Learn industry norms for determining who should be in charge; how your incident response team could be structured; and how to meet emerging regulatory obligations. In the world of cybersecurity incident response, preparation is key. We are here to help you prepare.
Jamie Singer
Senior Managing Director
FTI Consulting
Jamie Singer is a Senior Managing Director in the Strategic Communications segment at FTI Consulting and is based in Chicago. Jamie co-leads the firm’s Cybersecurity & Data Privacy Communications practice, and has counseled Fortune 500 companies and public sector organizations through some of the most high-profile and largest cybersecurity crises of the past decade.
Jamie works closely with leading cybersecurity law firms, insurance companies and forensics providers to assist organizations with strategic communications and reputation management services before, during and after significant cyber incidents. Jamie helps clients prepare for and minimize the reputational impacts stemming from complex, high-visibility data security and privacy issues from ransomware attacks to business email compromises to third-party breaches. She is recognized for her exceptional ability to strategically lead clients through the complexity of a high-impact crisis in a challenging environment with a critical eye on reputation management and responsive crisis communications. Jamie has worked with hundreds of clients navigating cybersecurity and data privacy issues across sectors, including healthcare, financial services, technology, retail and higher education. Within the healthcare space specifically, Jamie advised on the communications responses to half of the top 10 largest healthcare data breaches in 2023.
Prior to joining FTI Consulting, Jamie was an Executive Vice President and Director of Data Security, Privacy and Crisis Communications at Resolute Strategic Services, where she led the CyberStrategies division. At Resolute, Jamie led communications response on a number of high-profile cybersecurity matters, including one of the largest healthcare breaches in 2021, for a well-known satellite communications company and for a major professional sports franchise. Jamie also spent 7 years at Edelman, where she was a Senior Vice President in the firm’s Crisis & Risk practice and a senior lead in the U.S. Data Security & Privacy Group. During her seven years at Edelman, Jamie led teams in crisis and brand reputation responses for one of the largest airlines in the world, for one of the largest credit card hacks of all time, and for one of the largest insurers in the United States.
Jena Valdetero
Shareholder
Greenberg Traurig, LLP
Jena M. Valdetero serves as Co-Chair of the firm’s U.S. Data Privacy and Cybersecurity Practice where she advises clients on complex data privacy and security issues. She has led more than 1,000 data breach investigations. A litigator by background, Jena defends companies against privacy and data breach litigation, with an emphasis on class action lawsuits. She has designed and conducted dozens of data breach tabletop exercises to empower clients to respond effectively to a data security incident. She also counsels companies on data privacy and security compliance programs and advises on privacy and cyber risks associated with mergers and acquisitions, venture capital, and securities. Jena also advises a diverse array of clients on compliance with existing and emerging privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Gramm Leach Bliley Act (GLBA), and the Health Insurance Portability and Accountability Act (HIPAA). She is a certified privacy professional through the International Association of Privacy Professionals (CIPP/US), for which she is a former KnowledgeNet Co-Chair.
Reena Bajowala
Shareholder
Greenberg Traurig, LLP
Reena R. Bajowala has deep experience with data security, information technology, and privacy law issues. She is a Certified Information Privacy Technologist (CIPT), a Certified Information Privacy Professional – US (CIPP/US) and a Certified Information Privacy Manager (CIPM). Through a competitive process, she was selected as a 2021-2023 Fellow of the American Bar Association’s Business Law Section with the Cyberspace Law Subcommittee. She serves on the Steering Committee of the U.S. Secret Service’s Chicago Cyber Fraud Task Force.
When faced with a data breach, including in business email compromise, ransomware, or wire transfer fraud scenarios, clients turn to Reena to investigate, remediate, and comply with legal obligations. She regularly conducts risk assessments, develops privacy and information security compliance programs, and leads proactive planning for potential data security incidents, including drafting incident response plans, communications plans, and conducting tabletop exercises. In addition, Reena helps evaluate legal risks relating to emerging technologies, including artificial intelligence, connected devices, and drones.
Reena assists Employee Retirement Income Security Act (ERISA) benefit plan sponsors with implementing cybersecurity policies and service provider management programs. The Department of Labor’s current emphasis on cybersecurity allows Reena to utilize her combined decade-plus ERISA and benefit plan counseling and litigation experience and her deep cybersecurity and vendor management practice.
Reena has wide-ranging litigation and trial experience, including over 100 days of first-chair trial experience. She represents buyers and providers of IT services regarding issues ranging from billing and performance disputes arising from Master Services Agreements and Service Level Agreements to copyright and licensing disputes pursuant to Software Licensing and SaaS agreements. Reena also works to protect the interests of companies during software audits.
With a broad-based background in complex dispute resolution, Reena understands the intricacies of class, collective, and plan-wide litigation in the employment and consumer fraud spaces. She has deep experience with lawsuits involving ERISA, having represented plan sponsors and service providers in both benefits and fiduciary matters.
-
Contains 2 Component(s) Recorded On: 03/25/2024
This panel of public and private company cybersecurity and privacy attorneys will review existing and emerging cyber-related practices, regulation, oversight, enforcement and other actions being taken by the myriad government agencies, including the SEC, DHS/CISA, FBI, the intelligence agencies, DOJ, OFAC, NIST, FTC and other sector-specific and independent agencies, for which companies need to prepare.
The federal government (in addition to other countries) is rapidly increasing its focus on cybersecurity oversight and regulation. Cyber-attacks are increasing in number, sophistication and impact, driving more attention and regulation just as companies are scrambling to add cyber expertise and fill skill gaps, both inside the company and through vendors, to address the threats. This panel of public and private company cybersecurity and privacy attorneys will review existing and emerging cyber-related practices, regulation, oversight, enforcement and other actions being taken by the myriad government agencies, including the SEC, DHS/CISA, FBI, the intelligence agencies, DOJ, OFAC, NIST, FTC and other sector-specific and independent agencies, for which companies need to prepare. The panel will discuss latest trends, provide key insights, share their personal experiences and offer practical advice for addressing the growing wave of cybersecurity regulation and oversight.Elimu Kajunju
General Counsel - Honeywell Forge Product, Regulatory & Technology
Honeywell
Jon W. Olson
Senior Vice President & General Counsel
Blackbaud, Inc.
Sarah Rugnetta
Partner - Cybersecurity and Data Privacy Vice Chair
Constangy Brooks, Smith & Prophete, LLP
Sarah serves as a vice chair of the Constangy Cyber Team and practices in New York. She leads the provision of compliance advisory services for the Cyber Team, advising clients on strategies to mitigate risk associated with data privacy and security through business-oriented approaches. Sarah has more than 15 years of experience working in the privacy law area. She is a former privacy officer, a former state regulator, and has extensive experience serving as outside counsel for businesses in the fields of health law, data privacy, regulatory compliance, and risk management.
Sarah helps clients to develop and implement customized privacy programs, data privacy assessments, executive trainings, and tabletop exercises. Sarah also works with clients on strategies to mitigate risks posed by vendor relationships through improved vendor management programs, contracting protocols, and vendor oversight. Additionally, she helps clients to anticipate and effectively respond to potential threats, and assists businesses throughout all phases of information security incidents.
A former Assistant General Counsel with the Vermont Department of Financial Regulation, Sarah regularly interfaces with state and federal agencies in response to investigations, enforcement actions and compliance audits. In addition, she worked as a Program and Policy Advisor for the United States Agency for International Development in New Delhi, India, where she provided guidance on health and gender programs. Sarah holds the Certified Information Privacy Professional for European law (CIPP/E) credential.
Katheryn Rizzo
Acting Deputy Chief Counsel for Infrastructure Security and Regulatory Programs within the Office of the Chief Counsel
Cybersecurity and Infrastructure Security Agency (CISA)
Kathy Rizzo is the Acting Deputy Chief Counsel for Infrastructure Security and Regulatory Programs within the Office of the Chief Counsel at the Cybersecurity and Infrastructure Security Agency (CISA), the newest component agency of the U.S. Department of Homeland Security. Kathy advises the agency on a wide range of legal issues related to the implementation of the CISA’s infrastructure security mission and the development and operation of CISA’s regulatory programs, including the Chemical Facility Anti-Terrorism Standards Program, the Protected Critical Infrastructure Information Program, and the forthcoming Cyber Incident Reporting for Critical Infrastructure Act of 2022 regulations. Prior to joining CISA, Kathy served in the Office of the Principal Legal Advisor for U.S. Immigration and Customs Enforcement, where she also worked on the promulgation, implementation, and defense of federal regulations. Kathy earned her J.D., M.A., and B.A. from American University and holds a CIPP/US certification.
-
Contains 2 Component(s) Recorded On: 03/25/2024
We all need to be prepared for a possible acquisition, divestiture or sale, and cybersecurity is one of the hot ânewâ topics in M&A, as well as a focus area of boards, investors and courts. We aim to address how should you be prepared.
We all need to be prepared for a possible acquisition, divestiture or sale, and cybersecurity is one of the hot ânewâ topics in M&A, as well as a focus area of boards, investors and courts. We aim to address how should you be prepared; how are deal terms, pricing, escrow, liability and reporting requirements impacted; what should be included in diligence; what are the right levels of access for diligence; how are current market practices evolving; how companies undergoing transactions are being targeted by criminals; how to follow through on diligence findings after a transaction closes; considering whether your counterparty is already compromised or non-compliant with security regulations and whether your counterpartyâs immaturity increases your risk of compromise or regulatory action. Whether an acquisition, divestiture or sale is in your companyâs near-term plans or down the road, the time to prepare is now.Randall Cook
Chief Legal Officer, CCO and CRO (former)
BlackBerry
Randall Cook has served as a public and private company General Counsel, a U.S. Government official, federal prosecutor and in private practice, and is also a former intelligence officer.
Most recently, Randall was the Chief Legal Officer of BlackBerry, a cybersecurity software and services company serving 80%+ of the U.S. Government, 18 of the G20, 24 of the 25 top electric vehicle makers, 9 of the 10 top global banks, and 9 of the 10 largest automotive OEMS, as well as medical device, healthcare, manufacturing, law firms and other companies. He also served as Chief Compliance Officer and Chief Risk Officer, and led the Global Security, Lawful Access, Employee Health & Safety, Forensic Investigations and Government Affairs teams. Prior to BlackBerry, he was the General Counsel of Calypso Technology, a PE-backed financial services software company, and SVP and General Counsel at Advent Software, a public software and data company. Prior to joining Advent, Randall was the Assistant General Counsel for iXL, Inc., a public e-commerce technology and development company, during and after its IPO.
Randall also served in the U.S. Government and on interagency committees with a wide range of agencies and federal labs, advising on international and technology issues. His roles included serving as a Special Assistant U.S. Attorney at the U.S. Attorney’s Office in Washington, D.C. where he was the lead prosecutor for intellectual property piracy and other cases; Special Counsel at the U.S. Department of Commerce; and Attorney-Advisor in the Executive Office of the President at the U.S. Trade Representative’s office. In private practice, he represented technology, satellite, aerospace, telecom, mobile, manufacturing and regulated companies, including before Congress, the Executive Branch, the Courts and independent agencies.
Randall graduated summa cum laude and Phi Beta Kappa from Claremont McKenna College, and he received his law degree from U.C. Berkeley. He is admitted to practice in California and before the Supreme Court of the United States, the Court of Appeals for the D.C. Circuit and the U.S. District Court for the Northern District of California.
Victoria Harvey
Senior Vice President & Chief Legal Officer
Smile Brands
-
Contains 2 Component(s) Recorded On: 03/25/2024
From the Executive Order on Cybersecurity to the EU Cyber Resiliency Act, regulators are increasingly seeking to define minimum requirements and best practices around application security and software supply chain security for software applications and SaaS vendors. This panel will discuss the impacts of software security regulations on the future development, commercialization and procurement of software products and related services.
Following the worldâs most infamous supply chain attack on SolarWinds, government across the globe have grappled to find ways to increase software supply chain security and protect end users from potentially devastating vulnerabilities and zero-day attacks. From the Executive Order on Cybersecurity to the EU Cyber Resiliency Act, regulators are increasingly seeking to define minimum requirements and best practices around application security and software supply chain security for software applications and SaaS vendors. This panel will discuss the impacts of software security regulations on the future development, commercialization and procurement of software products and related services.Lavonne Burke
Vice President Legal - Global Security & Resiliency and Digital
Dell Technologies
Lavonne is technology executive and award-winning attorney, speaker, author and transformative leader that has represented companies of all sizes in cybersecurity, privacy & data protection, IT, emerging technologies and intellectual property legal matters. She currently leads a global team of lawyers at Dell Technologies focused on Cybersecurity, IT, Privacy and Data Protection, Product & Application Security, Supply Chain Security, Corporate/Physical Security, Crisis Management, Insider Threat, Enterprise Resiliency & Fraud/Security Investigations. Her legal experience additionally includes advising on the creation, development and implementation of global information/cyber security and product & app security policies, enterprise-wide regulatory compliance frameworks & strategies, governance & compliance, risk management and crisis response, cyber security & product security incident management and response, negotiation of intellectual property and software licenses, product development & commercialization counseling, and technology/IP acquisitions and strategic investments.
While serving as outside counsel, Lavonne gained extensive experience supporting more than in $100B+ of global commercial and business strategic transactions in the context of technology transactions, IP monetization, buy and sell-side M&AD, IPOs, VC /Private Equity transactions, financing, licensing, sourcing and procurement and strategic capital investments. Her experience further includes evaluating, acquiring, licensing, and enforcing intellectual property rights in numerous industries, including technology, software, digital media, pharmaceuticals, medical devices, biotechnology, health care and energy. She has vast experience in drafting and negotiating a varied array of transactional agreements, including: IP license agreements, non-disclosure agreements, commercial purchase agreements, definitive purchase agreements, software/IT, cloud and aaS agreements, master service agreements, outsourcing agreements, franchising agreements, distribution and supply agreements, joint development and commercialization agreements. -
Contains 2 Component(s) Recorded On: 03/25/2024
In these days of heightened scrutiny, greater pressure is being placed on companies to guide and take accountability for cybersecurity compliance in vendor management, particularly for smaller vendors that are not able to keep up with the latest developments. Learn from our panel of industry experts how increasingly important it is for companies engaging a broad swath of vendors to help support their business by having a risk-based approach to vendor management, including for cybersecurity, understanding where their âcrown jewelsâ are located, and protecting the most important personal, private information.
In these days of heightened scrutiny, greater pressure is being placed on companies to guide and take accountability for cybersecurity compliance in vendor management, particularly for smaller vendors that are not able to keep up with the latest developments. Learn from our panel of industry experts how increasingly important it is for companies engaging a broad swath of vendors to help support their business by having a risk-based approach to vendor management, including for cybersecurity, understanding where their âcrown jewelsâ are located, and protecting the most important personal, private information.Fred Roth
Assistant General Counsel, Technology and Data Privacy
Compass Group USA
Luke Sosnicki
Partner
Thompson Coburn LLP
Luke is an experienced commercial litigator who solves complicated business problems for financial services, telecommunications, manufacturing, and retailer clients.
Luke defends clients in consumer class actions alleging unfair and deceptive practices and false advertising relating to customer agreements and disclosures, product labeling, print and media advertising, and online sales. The damages at issue in these lawsuits has ranged from hundreds of thousands to tens of millions of dollars.
Luke represents clients in commercial disputes, including breaches of contract, leasing, negligence, intentional and negligent misrepresentation, and trade-secret theft, among others. In both litigation and arbitration, Luke uses effective and efficient strategies to further his clients' business needs and goals.
As an experienced financial services litigator, Luke also defends financial institutions in lawsuits across the country brought under various state and federal consumer protection statutes. These lawsuits have challenged financial institutions' practices relating to account and loan fees, loan origination, servicing, debt collection, foreclosure, and unfair and deceptive lending practices.
Luke is also found at the forefront of data and cybersecurity issues. He holds a CIPP/US certification from the International Association of Privacy Professionals, and provides comprehensive advice on litigation risks related to federal and state data privacy laws, including the California Consumer Privacy Act (CCPA).
-
Contains 2 Component(s) Recorded On: 03/26/2024
The panel will provide an overview of law enforcement cybersecurity priorities the trends related to nature and source of both internal and external threats, likely threat actors and targets, and current cybersecurity risks to critical infrastructure and supply chains.
The panel will include the perspectives from the US Attorneys Office, FBI, Secret Service, The Office of the National Cyber Director of The White House, a General Counsel and a Board Director. The panel will provide an overview of law enforcement cybersecurity priorities the trends related to nature and source of both internal and external threats, likely threat actors and targets, and current cybersecurity risks to critical infrastructure and supply chains. The panel will address the importance of the private and public partnerships in successfully building a resilient cybersecurity program and in responding to a cyber incidents. The discussion will include the factors in-house attorneys should consider as they work with the C-Suite and the Board in deciding whether to engage law enforcement in responding to a cyber incident, the timing of the engagement, and how to best engage law enforcement.Ayan Islam
Director, Cyber Workforce
Office of the National Cyber Director
Bernadette Alway
Special Agent
U.S. Federal Bureau of Investigation
In January 2023, Special Agent Bernadette Alway accepted the position of Private Sector Coordinator for the Domestic Security Alliance Council for the Los Angeles Field Office, where she oversees programs to enhance public-private partnerships to better protect Americans and safeguard U.S. economic and national security. Just prior to arriving in LA, SA Alway most recently held positions as a Supervisory Special Agent in the National Academy at the FBI’s Training Division where she created the first classified National Security Course for NA students. SA Alway also was assigned to the FBI’s Counterterrorism Division’s Strategic Engagement Unit where she created and fostered relationships with key private sector partners in support of the FBI’s top national security investigations.
SA Alway is also an accomplished case agent where she spearheaded significant health care fraud investigations in both the Jackson and Chicago Field Offices. SA Alway also held collateral duties of Evidence Response Team Member, WMD Coordinator, Crisis Management Coordinator and Continuity of Operations Coordinator during her near twenty years of experience in the FBI. In September 2023, SA Alway was accepted to the FBI’s Victim Services Response Team for deployment in support of national mass casualty incidents.
Prior the FBI, SA Alway was a police officer in Pennsylvania where she specialized in computer forensics and sexual assault investigations. SA Alway holds a bachelor’s degree in criminal justice and an MBA from Penn State University.
Thomas O'Brien
Shareholder
Greenberg Traurig, LLP
Thomas P. O’Brien advises clients throughout all phases of government investigations and prosecutions encompassing a broad scope of situations such as corporate compliance matters, fraud, and state and federal False Claims Act cases. He serves as both an advocate and counselor for corporations and individuals, guiding them from the start of government interactions to the end of trial proceedings. Tom often carries out internal investigations for corporations and municipal governments with a strategic approach, aiming to prevent clients from potential legal violations or misconduct.
In the field of white collar defense, Tom manages cases of embezzlement, accounting fraud, and bribery, among others, addressing complex and dynamic issues. He represents clients in complex civil actions involving substantial financial amounts and offers advice to foreign state leaders in criminal proceedings. He has robust experience managing cases associated with federal and state False Claims Act statutes (also known as qui tam matters), and the Foreign Corrupt Practices Act. He effectively guides clients through intricate health care fraud issues, as well as other regulatory hurdles.
Lauren Restrepo
Assistant United States Attorney
U. S. Department of Justice
Jensen Penalosa
Supervisory Special Agent
U.S. Federal Bureau of Investigation
-
Contains 2 Component(s) Recorded On: 03/26/2024
In a world where cyber threats are increasingly prevalent and more sophisticated, companies must be vigilant and prepared to address questions from investors about their cybersecurity strategy and preparedness regarding disclosure, before an event occurs. This 60-minute panel discussion will help teams to better understand how to prepare for SEC cyber incident and risk management disclosure requirements including materiality and related incident assessments and cyber risk program disclosures.
In todayâs digital age, cyber incident and risk management disclosure readiness is a critical aspect of the Security Exchange Commissionâs (SEC) regulatory framework. Materiality assessments help companies determine the significance of a cyber incident in the context of their financial reporting and are rapidly becoming a core element of company programs as a result of the rule passed in July of 2023 by the SEC, requiring companies to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy and governance. Related incident assessments are equally important as they provide insight into the nature and scope of the incident, aiding in the development of a comprehensive disclosure strategy. Disclosures today require Security Incident Response Teams (likely part of Information Security) and Legal/Compliance teams to work more closely together than ever before. In all likelihood, there is a component of data privacy and risk related to data privacy breach analysis that is included in such reviews. In a world where cyber threats are increasingly prevalent and more sophisticated, companies must be vigilant and prepared to address questions from investors about their cybersecurity strategy and preparedness regarding disclosure, before an event occurs. This 60-minute panel discussion will help teams to better understand how to prepare for SEC cyber incident and risk management disclosure requirements including materiality and related incident assessments and cyber risk program disclosures.Michelle VonderHaar
Chief Legal Officer
Tenable
Michelle VonderHaar, Chief Legal Officer and Corporate Secretary, leads Tenable’s global legal organization. Tenable is a leader in exposure management providing products and solutions that empower organizations to understand and reduce their cybersecurity risk. Michelle is a seasoned legal executive with more than 30 years of domestic and international legal experience, working and living in the United States, Europe, and Asia, and leading global legal teams focused on providing strategic and practical advice to global organizations.
Prior to Tenable, Michelle served as Senior Vice President, Deputy General Counsel and Assistant Secretary at HP, driving transformation of the company’s commercial global legal affairs team from a three-region model to nine geographic markets. Michelle also served as the HP’s Chief Compliance Officer and Deputy General Counsel for the Print Global Business Unit, Global Ethics & Compliance, Employment, Brand Security, Litigation, Privacy, Supply Chain, Antitrust, Environmental, Health & Social Responsibility.Prior to HP, Michelle served as Senior Vice President and General Counsel of Veritas Technologies, a leading backup and storage enterprise software company that spun out of Symantec Corporation. Before that, Michelle held various positions with Symantec, a global enterprise and consumer antivirus and storage software provider, in its legal department, including leading the corporate function, M&A and compliance. Michelle also led Symantec’s legal team in the APJ region, based in Singapore, and served as the General Counsel to the Huawei-Symantec joint venture, based in China.
Before moving in-house, Michelle was a commercial litigator with Katten Muchin Zavis LLP in Los Angeles and Irvine, and a corporate finance and M&A attorney with O’Melveny & Myers LLP practicing in London, San Francisco, and Silicon Valley.
Michelle is admitted to practice law in California, Washington, D.C., New York, and England & Wales, and she received her law degree from the University of Arizona, James E. Rogers College of Law where she was a member of and published in the Arizona Law Review.
Michelle also serves as a board member for a number of non-profit organizations, including D.C.-based Urban Libraries Council, Silicon Valley Leadership Group Foundation, and Catholic Charities of Santa Clara County. She also serves as an advisory board member of Parents Helping Parents.
Natalie Prescott
General Counsel & Chief Privacy Officer
Fulgent Genetics
Experienced executive (Russel 2000; NASDAQ: FLGT), AmLaw 2 (Latham & Watkins LLP), healthcare and life sciences attorney, board member, cybersecurity professional, award-winning book author, and privacy law specialist (PLS). Expert negotiator and problem-solver. I am a valued partner, trusted advisor, and business strategist. I pride myself on strong leadership, cross-functional collaboration, and solution-oriented approach.
I lean into nearly two decades of legal experience to mitigate business risks, including complex business litigation, healthcare, regulatory, class actions, corporate securities, corporate governance, risk management, privacy, data breach response, compliance, ESG & DEI, labor and employment, HR, and intellectual property.Alexander "Sandy" Bilus
Partner
Saul Ewing
Alexander (Sandy) R. Bilus assists clients who are facing complex commercial litigation or who need legal advice on issues involving cybersecurity and data privacy, particularly in the higher education and financial services industries. Sandy's litigation experience includes arguing cases before the U.S. Court of Appeals for the Third Circuit and assisting with cases before the U.S. Supreme Court and the Supreme Court of Pennsylvania. His cybersecurity and data privacy experience includes responding to potential data breaches and providing advice on compliance with the European Union's General Data Protection Regulation (GDPR).
Sandy's work for institutions of higher education includes providing advice and conducting internal investigations connected to their compliance concerns, as well as responding to private lawsuits and government enforcement activity.
-
Contains 2 Component(s) Recorded On: 03/26/2024
This session will focus on how to begin data discovery, application of metadata tagging, and initiating technical and operational processes to fulfill regulatory compliance. We will also explore how your work needs to be aligned with a larger corporate data protection strategy in order successfully implement a data governance program to minimize the impact in the event of a cyber attack.
With the growing regulatory oversight, potential criminal liability, increasing use of Generative AI and more sophisticated cyber criminals, the legal, privacy, and compliance functions can no longer claim a lack of technical knowledge and understanding. This session will focus on how to begin data discovery, application of metadata tagging, and initiating technical and operational processes to fulfill regulatory compliance. We will also explore how your work needs to be aligned with a larger corporate data protection strategy in order successfully implement a data governance program to minimize the impact in the event of a cyber attack.Abha Romkey
VP - Corporate Legal Services
Emera Inc.
Brandon Reilly
Partner, Privacy & Data Security
Manatt, Phelps & Phillips, LLP
Brandon Reilly is a partner in Manatt’s privacy and data security practice, recognized nationally for his work in cyber law and as a “Top 40 Under 40” and “Top Cyber” lawyer in California. A trusted go-to advisor on privacy and data security issues for a sophisticated client base, Brandon is skilled at developing business-focused privacy and security frameworks aimed at mitigating future enforcement and litigation risk. His practice includes a wide array of consumer protection and privacy matters, including data privacy, security compliance and procedures, and data breach responses.
Brandon has experience advising and representing Fortune 500s, multinational corporations, emerging companies and nonprofits across a range of industries—including technology, e-commerce, consumer products, advertising and digital media, health care, financial services/fintech, entertainment, leads generation, professional services, real estate, energy, manufacturing, infrastructure, insurance, education and cannabis—including those taking advantage of opportunities and controlling privacy and cybersecurity risks in AI/ML deployments, Web3 and the metaverse.
Also a civil litigator with broad experience in federal and state courts, Brandon has significant experience litigating on behalf of a wide range of businesses. He leverages his privacy and data security and litigation experience to assist clients facing such litigation and government enforcement actions.
A thought leader and frequent speaker in the privacy and data security space, Brandon is a Certified Information Privacy Professional for the U.S. Private Sector (CIPP/US) and an active member of the International Association of Privacy Professionals (IAPP) and co-founder of its local Orange County chapter. Brandon has also spoken at national industry organizations such as the IAPP, the Institute for Internal Auditors (IIA), ISACA (the Information Systems Audit and Control Association) and the Information Systems Security Association (ISSA), and he has been quoted by Bloomberg Law, Daily Journal and Cybersecurity Law Report as well as published in other notable publications.
Brandon is the coordinator of Manatt’s veterans’ benefits and discharge upgrades pro bono practice and regularly provides pro bono representation in that area.
Jeffrey Reese
Associate Vice President, Deputy General Counsel - Governance, Privacy & Cyber Affairs
UMA Education, Inc.
Tanya Blocker
Assistant General Counsel, US Director, UK Sr. Mgr., Employment & Labor, Privacy & Cybersecurity
National Grid
Ms. Tanya N. Blocker is the Assistant General Counsel and Director for the US Employment, Labor, and Benefits Group of energy conglomerate National Grid. Ms. Blocker began her legal career working at the law firm Kaye Scholer LLP. (kna Arnold Porter Kaye Scholer) where her practice centered around complex commercial litigation matters, including white-collar criminal defense and employment law.
Subsequently, Ms. Blocker served as senior counsel at a few AM 100 national law firms as well as in the Labor & Employment Law Division of the New York City Law Department, Office of Corporation Counsel, where she litigated management-side employment matters, class and collective actions.
Ms. Blocker’s drive and dynamic personality has also facilitated her success in her leadership roles, including as the former President of the Association of Black Women Attorneys and the former Co-Chair of the Metropolitan Black Bar Association’s Labor & Employment Section. With global leadership in her sights, Ms. Blocker has spent a significant portion of time in Accra, Ghana engaging in diversity and governance work and has presented on international employment law in Lagos, Nigeria.
Ms. Blocker is also a Center for Strategic & International Studies Abshire-Inamori Leadership Academy 2019 Fellow—a flagship leadership program designed to equip aspiring global leaders to be effective and ethical changemakers.
Ms. Blocker has been recognized for her exemplary leadership prowess, including by the New York Law Journal as a Distinguished Leader, the Network Journal as a 40 Under Forty Achievement recipient, by Profiles in Diversity Journal as a 2019 Women Worth Watching honoree, as a Top 100 Magazine as a 2020 Top 100 Attorney, and by the Council of Urban Professionals as a 2021 Law CUP Catalysts.
Ms. Blocker was recently selected as a 2022 LCLD Fellow, currently serves as General Counsel for the Dominican Bar Association, and is a member of the New York City Bar Association’s Labor and Employment Committee. Ms. Blocker received her J.D. from St. John’s University School of Law.