Cybersecurity

Organizations’ critical infrastructure systems are essential to their bottom line, ability to innovate and daily operations. The Cybersecurity (U.S.) Module offers guidance on how to handle your cybersecurity obligations and covers areas of law such as the Gramm-Leach-Bliley Act, Cyber Incident Reporting for Critical Infrastructure Act of 2022, NIST SP 800-53 Rev. 5 (Recommended Security Controls) and over 33 other compliance sources.

Cybersecurity compliance content is organized by:
  • Overview 
  • Asset Management 
  • Business Environment 
  • Governance 
  • Risk Assessment 
  • Risk Management Strategy 
  • Supply Chain Risk Management 
  • Identity Management, Authentication and Access Control Awareness and Training 
  • Data Security 
  • Information Protection Processes 
  • Maintenance 
  • Protective Technologies 
  • Anomalies and Events 
  • Security Continuous Monitoring 
  • Detection Processes 
  • Response Planning 
  • Response Communications 
  • Analysis 
  • Mitigation 
  • Recovery Planning 
  • Improvements 
  • Recovery Communications 

 
Meet The Authors

John Davis is senior counsel at Crowell & Moring, co-chair of its E-Discovery & Information Management Practice and a member of the Litigation Group. John has over 20 years of experience advising clients on cybersecurity and other data law issues including data security, compliance, breach analysis and response, privacy, discovery, data analytics, cross-border transfers, information governance, and emergent technology. He leads responses to U.S. and foreign governmental inquiries, conducts international investigations of data breaches, and counsels companies on managing data risk in litigation and through their policies and procedures. John is an award-winning author and frequent lecturer on cybersecurity, investigations and data law.

John received his law degree magna cum laude from the Georgetown University Law Center, where he was admitted to the Order of the Coif and served as senior articles editor of the American Criminal Law Review. Before joining Crowell & Moring, John was counsel at UBS in its litigation and investigations functions in charge of global complex cases. John is a member of the bars of the States of New York and California (inactive), the U.S. Supreme Court, the U.S. Courts of Appeals for the Second and Eleventh Circuits, and multiple federal district courts.
Senior Counsel, Crowell & Morning
Annmarie Giblin concentrates her practice on the legal issues surrounding cyber, privacy, and insurance. She provides proactive cyber legal defense, third-party vendor legal risk management, cyber incident response, and emerging technologies, such as Artificial Intelligence. Annmarie also advises clients on best practices and compliance with privacy and cyber laws and regulations, and related contract issues, including drafting unique contract language to address emerging and novel legal issues.

Annmarie also advises on coverage for exposures arising out of emerging technology, digital, and compliance risks. She counsels insurers on cyber insurance product development, policy wordings, and silent cyber issues.

Prior to joining Hinshaw, Annmarie was the principal of Giblin Law PLLC. She advised clients on cyber and privacy law, related consultant work, and all types of general litigation. While attending law school at night and working full-time, Annmarie served on the Junior Bar of the Moot Court Honor Society.

View the cyber webinar co-hosted by Annmarie: Staying A Step Ahead: Strategies for Cybersecurity Compliance in Financial Services | Law.com

Compliance Conversations With Our Authors

Request a Demo

Learn more about Regulatory Compliance.