John Connell Email & Phone Number

Charlotte, North Carolina, United States

Manage the Cyber Risk Consulting practice for UnitedLex. Manage client engagements, including:- Cyber Risk Assessments- Incident Response Services- Information Security Program and Policy Development- Penetration Testing/Vulnerability Scanning- Security Awareness- Incident Response Testing and Drills- Third Party Cyber Risk Management- NIST/ISO27001/SANS Critical Control Frameworks- Cyber Crime/Fraud

Charlotte, North Carolina Area

Consulted with clients to resolve a wide variety of sensitive litigation, investigation and security issues. • Founding member of the UnitedLex Cyber Risk Solutions practice for Cyber security, digital forensics, and incident response situations. • Managed the response to a transportation disaster to prepare for possible litigation from an electronic discovery perspective.• Maintained communication and responsibility to respond to technical questions on a regulatory matter for a client, including multiple meet-and-confer conferences.• Managed the data identification, collection, and processing for data required in a tight turnaround on a M&A based Second Request.• Sold more than $1 million dollars worth of complex project engagements in my first year.• Set and reset multiple times the practice's billable hour records for months and quarters.• Maintained financial oversight of client engagement budgets vs. agreed upon contracts and statements of work.• Responsible for technical sales in addition to managing teams through client execution and delivery.• Managed technical assessments of clients’ information technology security controls, both from a policy and procedure standpoint as well as from a technical system implementation perspective.

Charlotte, North Carolina Area

• Develop intellectual property (IP) protection protocols and plans for handling, storage and use of sensitive IP materials.• Developed requirements for external vendors and support organizations to access and handle sensitive IP materials for a client in the vendor selection process.• Manage a team to identify and aggregate data lost during a data breach that contained personally identifiable information (PII) and protected health information (PHI).• Coordinate log file data analysis to identify inappropriate access by vendor resources.• Analyze PII dissemination via email by a financial institution in order to respond to an inquiry by the Federal Reserve Bank.• Identify potential improvements in anti-piracy technology and processes for a media client.• Perform data collections in support of invetigations to identify specific pieces of evidence to be used in the ongoing investigation.• Investigate IP data leaks where sensitive internal or third party IP is released externally.• Analyze data in support of litigation related to fraud on specific transaction types.• Review information protection and privacy related to clients internal databases, and/or data that is shared with clients’ third parties.• Train clients and their third parites on IP protection requirements and guidelines.• Review, comment, and train upon clients’ acceptable use policies for technology and organizational resources.

• Perform expert witness services related to computer forensics and overall collection management concerning electronically stored information.• Manage large-scale data collections involving large numbers of custodians and locations.• Responsible for conducting data accessibility assessments and determining electronic discovery capability.• Assess client electronic discovery resources including documented processes, data repositories and system tools. • Assist with the creation of discovery, data collection and case management strategies.• Assist with the creation of systematic processes and documentation to support repeatable, efficient and reliable electronic discovery procedures. • Responsible for litigation readiness and litigation cost mitigation consulting related to electronic data. • Performing expert witness services related to cost/burden demonstrations concerning electronic data.

• Led team to respond to inquiries and investigations by various agencies including: SEC, NASD, DOJ, IRS, FBI, Secret Service and the US Attorney General.• Interfaced directly with outside counsel, Legal, Compliance, Technology and the line of business executives to formulate enterprise level responses to regulatory inquiries.• Completed declarations and affidavits to attest to ability to produce different types of evidence.• Responded to subpoenas and discovery requests for pending lawsuits. • Made risk/reward decisions to prioritize responses to investigations and inquiries.• Functioned as expert witness for depositions in high exposure cases.• Negotiated with third party vendors to obtain standardized pricing based on enterprise level workloads. • Achieved approximately $1 million in annual cost savings by streamlining processes and improving relations between departments.• Worked with senior executives to define the strategy around electronic evidence to reduce potential risks and exposures.• Managed production rollout of Lotus Notes 6 to over 42,000 users. • Created a strategic process and technical solution to facilitate the upgrade process, monitor progress, and manage issues. This process has been used as a model for all current and future migration projects. • Implemented processes/procedures that kept “per-user” cost well beneath industry standard. • Coordinated deployment activities simultaneously among major lines of business to help adapt their vastly different styles to standard processes.

• Consulted for a large telecommunications client on their market entry initiative for local phone service and DSL. • Conducted process redesign of the existing business procedures from ordering through billing.• Coordinated systems changes from requirements through rollout to ensure minimal impact to customer service representatives.• Partnered with multiple stakeholders to develop requirements that would be profitable to the client while providing the highest level of customer satisfaction.• Mediated discussions between the business stakeholders to ensure that requirements were met while maintaining budget and timeline constraints.• Assessed scope for future releases with regard to budget and timeline.• Presented “Train the Trainer” sessions to highlight system modifications for all new releases in order to communicate sales rep-impacting changes.

• Performed project management assessment work for numerous projects in the Financial Services, Insurance, Retail and Public Utility industries.• Performed data center security and disaster recovery assessments for several major financial institutions.• Earned an Exemplary Performance Award for publication of an article in the Information Systems Audit and Controls Association (ISACA) Journal. The article was titled “Business Continuity Planning for Electronic Commerce.”• Developed best practices to drive strategy for a venture capital firm interested in creating an Internet startup company for a biometric invention. As a result of this effort, we saved the venture capitalist $3 million by demonstrating that the project would not be profitable. • Managed the Y2K efforts for a major university in New York, achieving 100% project participation from all necessary employees.

Mba, Management

Activities and Societies: China Overseas Trip

Bse, Systems Science Engineering

Activities and Societies: Lambda Chi Alpha; Work Study Student