- Assisting enterprise-wide cyber legal department with remediation and risk assessment measures in response to a security incident that affected approximately 100,000,000 individuals in the United States and approximately 6,000,000 individuals in Canada

- Counseling clients on preparing for, responding to, and recovering from data breaches and other cyber-based attacks on critical systems- Assisting with data breach investigations, reporting, and litigation- Negotiating contracts to manage data breach risks- Assessing physical, technical, and administrative safeguards clients have adopted for the protection of their most sensitive data- Developing and implementing information security programs and ensuring compliance with federal and state regulatory requirements- Counseling clients on international, federal, and state data privacy laws, e.g., GDPR, HIPAA, HITECH, California Consumer Privacy Act (CCPA), New York DFS Cybersecurity Regulation, Children’s Online Privacy Protection Act (COPPA), Electronic Communications Privacy Act (ECPA), Stored Communications Act (SCA), Family Educational Rights and Privacy Act (FERPA)- Drafting international data transfer agreements in compliance with GDPR- Drafting policies and procedures for compliance with HIPAA's privacy, security, and breach notification requirements- Conducting physical and technical security risk assessments and vulnerability analyses against HIPAA, NIST SP 800-30, NIST SP 800-53, ISO 27001/27002, ISO 27799- Performing privacy and security gap analyses against information technology and security frameworks such as NIST, HITRUST, ISO, and COBITCertifications:- CISSP (Certified Information Systems Security Professional)- CEH (Certified Ethical Hacker)- CCSFP (Certified CSF Practitioner)

- Counseling clients on international, federal, and state data privacy laws, e.g., GDPR, HIPAA/HITECH- Drafting international data transfer agreements in compliance with GDPR- Drafting policies and procedures for compliance with HIPAA's privacy, security, and breach notification requirements- Assisting with data breach investigations, reporting, and litigation- Negotiating contracts to manage data breach risks- Conducting physical and technical security risk assessments and vulnerability analyses against HIPAA, NIST SP 800-30, NIST SP 800-53, ISO 27001/27002, ISO 27799- Performing privacy and security gap analyses against information technology and security frameworks such as NIST, HITRUST, ISO, and COBIT