The Legal Reality of a Cyber Security Breach

Today’s Speakers

2

Adam MeyerChief Security StrategistSurfWatch Labs

Eran KahanaSpecial CounselMaslon LLP

Been Breached? Get Ready for Lawsuits

• Lawsuit alleges data breach at Trump International

• FTC can sue companies with poor information security

• Target Reaches Settlement with Banks

• Sony Settles Over Hack Attack

• Excellus Faces Breach-Related Lawsuit

• Ashley Madison Breach Triggers Lawsuits

• OPM Sued Again… This Time by a Judge

• Neiman Marcus ruling just made it easier to sue companies that get hacked

3

Become Defendable in the Court Room

4

• Due diligence – what is reasonable care?

• Point-in-time checks are only good at that point in time!

“We believed we were doing things ahead of the industry.

We thought we were well-positioned.”

- Frank Blake, Chairman of Home Depot

Cybercriminals are Targeting Your Information So Plan Accordingly

• What information of yours is valuable to a cybercriminal?

• What cyber defenses are in place to reduce risk?

• What checks are in place to ensure processes and tools are doing the job?

5

Burying Your Head in the Sand is Not a Viable Defense

6

Common Responses that Fail in Defense Strategy• We didn’t know

• We don’t have the resources to address it

• We outsource our cybersecurity

Your Information is Actively Being Sold on the Dark Web

7

Cybersecurity is NOT an IT Problem; It’s a Business Problem

8

• Cyber attacks are #1 source of IP theft (Merrill Lynch)

• 86% of executives list major cyber concerns around M&A activity (Global Capital Confidence Barometer survey)

• Cybersecurity should be measured just like financials, sales, etc.

• Cyber threats must be tied to impact on business operations (IT, security, legal, fraud, risk management)

Cybersecurity Accountability Rests with the C-Suite

9

“… boards that choose to ignore, or minimize, the importance of

cybersecurity oversight responsibility, do so at their own peril.”

- Luis A. Aguilar, SEC Commissioner

The Same Old Cybersecurity Approach Puts You at Risk

10

• A point in time risk assessment is only useful AT THAT POINT IN TIME

• Cyber threats are dynamic

• Continuous outward-looking visibility and understanding is key to know what’s coming your way

• Business units must be tied in to properly manage cyber risk

11

SurfWatch Labs: Your All-in-One Threat Intelligence Solution

12

We Do the Heavy Lifting So You Can Run Your Business• Combination of Analytics, Products and

Human Experts Guide You to Make the Most Effective Security Decisions

• Tie Your Relevant, Critical Risks to the Impact on Your Business Operations (IT, Security, Legal, Fraud, Risk Management)

• Ensure Continuous Risk Monitoring of Traditional and Dark Web Threats to Your Business

• Receive Prioritized Threat Mitigation Best Practice Recommendations

Q&A and Additional SurfWatch Labs Resources

Solution Information:

• SurfWatch Cyber Advisor info.surfwatchlabs.com/SurfWatch-Cyber-Advisor-Datasheet

• SurfWatch Cyber Advisor with Dark Webinfo.surfwatchlabs.com/dark-web-service-brochure

Sample Dark Web Intelligence Report:info.surfwatchlabs.com/dark-web-report

Request a Demonstration:info.surfwatchlabs.com/request-demo

Learn how to Tie Threat Intelligence to Your Business Risk

13

Thank You!

www.surfwatchlabs.comFollow us at: