[October 2017] Legal Actions After a Breach by Edward McAndrew, Former Assistant U.S. Attorney

Thursday, October 19, 2017

5:30 PM – Networking & Dinner

6:00 PM – ISSA-NOVA Program

Responding to a Cyberattack and Working with Law Enforcement

Organizations are often operating under the assumption that their network has already been compromised or will be. Cybercriminals are constantly looking for new ways to bypass security measures. Forty-three percent of organizations surveyed by the Ponemon Institute in 2014 said they had suffered a data breach. Yet, 27 percent of companies didn’t have a data breach response plan or team in place.

The human instinct is to try to find those responsible for a hacking attack. But any attempt to access, damage or impair another system that appears to be involved in an attack without law enforcement involvement may be illegal and could result in civil and/or criminal liability. Since many intrusions and attacks are launched from compromised systems, there’s also the danger of damaging an innocent victim’s system.

Government agencies have repeatedly stressed the value of working closely with the government to mitigate the damage from attacks and to protect consumers. Last year, the FTC stated that it is more likely to favorably view companies that have worked with the agency involved in a cybersecurity investigation. The speaker will discuss best practices for legal action before and after a cyberattack.

Edward J. McAndrew is a counselor, investigator, and trial lawyer who leads the national Cyber Incident Response Team for Ballard Spahr LLP. Named a “Cybersecurity and Data Privacy Trailblazer” by The National Law Journal, he helps clients manage cyber risk and investigations. He was also appointed to the Delaware Supreme Court’s Commission on Law & Technology and leads its Data Security Working Group.

McAndrew served for nearly a decade as a federal cybercrime prosecutor in the U.S. Attorney’s Offices for the Eastern District of Virginia and for the District of Delaware and handled many high-profile trials. He is a frequent commentator, presenter and author on cybersecurity legal issues. You can contact Edward McAndrew at his company via:  mcandrewe@ballardspahr.com

Ed McAndrew
Ballard Spahr LLP
919 N. Market Street, 11th Floor
Wilmington, DE 19801-3034
302.252.4451 DIRECT
302.252.4466 FAX

1909 K Street, NW, 12th Floor
Washington, DC 20006-1157
202.661.2200 DIRECT
202.664.2939 MOBILE
mcandrewe@ballardspahr.com
www.ballardspahr.com

Location: Atomicorp, 15049 Conference Center Drive, Suite 180, Chantilly, VA 20151

http://www.atomicorp.com

Attendees may park for free in front of the building.

Registration Link: http://tinyurl.com/issa-nova-2017oct19

Actual link is https://app.smartsheet.com/b/form/b203451ae4704db38e9ccbea37d055b2

Sponsored by ISSA-NOVA, the Northern Virginia chapter of ISSA International

President: John von Ruden

Vice Presidents: Houda Abdelghani, Walter Cekala, Constantinos Doskas, Karen Frederick, Raja Medicherla, Saravanan Ramachari, Bud Roth, Raymond Stamps