Dany Guimond-Valcourt, Ll.B. Email and Phone Number

Cybersecurity professional and lawyer specializing in data protection, with over 15 years of experience helping organizations enhance their security posture and achieve regulatory compliance. Successfully guided hundreds of businesses across diverse sectors through complex cybersecurity challenges and regulatory landscapes.Expertise includes risk assessment, governance, and compliance, where she prepares organizations for regulatory audits and supports strategic initiatives. Dany is also a trusted advisor for ransomware tabletop exercises tailored to boards of directors and other stakeholders, equipping them with the tools to improve incident response readiness and manage crises effectively.In the realm of third-party risk management, she excels in contract negotiation and management, including conducting detailed contract reviews, drafting customized contractual clauses, and aligning vendor agreements with security requirements and regulatory obligations. Dany is a lecturer at Polytechnique Montréal, where she developed and teaches a master’s program in Software and Computing Engineering focused on cybersecurity. Her courses emphasize regulatory standards and frameworks, IR, BCP, and organizational resilience, equipping the next generation of cybersecurity professionals with practical skills to address strategic and regulatory challenges.As a guest lecturer at the Université de Sherbrooke, Dany contributes to the course Law, Cybersecurity, and Technological Risk Management where she covers cybersecurity insurance, breach response protocols, and the role of breach coaches. Her academic contributions blend real-world expertise with innovative teaching methods to prepare students for emerging cybersecurity demands.In addition to her academic roles, Dany is actively involved in advancing the legal profession's understanding of technology and cybersecurity through her position on the Montreal Bar Committee on Integrating Technology into the Practice of Law. In this role, she helps design and deliver training initiatives that equip lawyers with the tools and knowledge needed to navigate the evolving technological landscape.Dany’s knowledge spans global privacy regulations, including PIPEDA (Canada), GDPR (Europe), CCPA (California), and Quebec’s Law 25, alongside internationally recognized frameworks such as NIST and ISO 27001. She is dedicated to empowering organizations to achieve compliance, build resilience, and manage cybersecurity risks with confidence, while strengthening third-party relationships to support secure and compliant operations.