NJSBA 2025 Cybersecurity Institute: From Breach to Boardroom
Category: On Demand
Member Price: $236
Non-Member Price: $295
Product Code: ON109125
Areas of Law: For All Attorneys, Technology
CLE Credits
| NJ CLE: | NJ CLE information: This program has been approved by the Board on Continuing Legal Education of the Supreme Court of New Jersey for 5.7 hours of total CLE credit, including 2.4 in Ethics (Full Credits Available: NJ Ethics: 2.4, NJ General: 3.3). |
| NY CLE (t&nt): | NY Cybersecurity Ethics Non-transitional: 2.0, NY Cybersecurity General Transitional: 3.0 |
| PA CLE: | PA Ethics Credit: 2.0, PA Substantive Credit: 2.5
New: No PACLE fee is required for this program. To earn PA CLE credits, a valid PA Bar ID number must be entered into the CLE form provided after attending the program. |
Faculty
Featured Speaker
Moderator
- Rebecca L. Rakoski, Esq.
- Co-Chair, NJSBA Task Force on Artificial Intelligence (AI) and the Law
XPAN Law Partners LLP, Marlton - Karen Painter Randall, Esq.
- Connell Foley LLP, Roseland
Presenters
- Killol Darji
- Chief Information Security Officer, New Jersey Courts
- Monique Ferraro
- Cyber Counsel, HSB, Hartford
- Paul Ihme
- Cofounder and Managing Principal
Soteria LLC - Morgan Jones, Esq.
- Brown Rudnick LLP, New York
- Laks Kattalai
- Chief Information Officer, New Jersey Judiciary
- Jessica Lewis Kelly, Esq.
- Special Assistant To the Administrative Director, Administrative Office of the Courts
- Conor Osthoff
- Head of Incident Response, Americas, S-RM
- Michelle A. Schaap, Esq.
- Member, Tech, Privacy and Data Innovations
Chiesa Shahinian & Giantomasi PC, Roseland - John T. Wolak, Esq., CIPP-US
- Director, Business & Commercial Litigation Group
Gibbons P.C., Newark - Don Wyper
- Chief Operating Officer, DigitalMint Cyber
The Essential Annual Update Every Attorney Needs to Protect Their Firm, Their Reputation, and Their Clients' Futures
Your clients trust you with their most sensitive information. One breach could destroy that trust - and your practice. In five fast-paced hours, the tri-state area's leading cybersecurity and data privacy authorities will arm you with practical, battle-tested strategies to transform your firm from vulnerable target to fortified practice. You'll leave with tools you'll implement Monday morning, contracts you'll revise that afternoon, and the confidence to guide clients through their darkest digital hours.
This isn't theory. This is survival.
Program Schedule:
- 9:00 a.m. | Opening Keynote: Threat Landscape 2025
Presented by: Karen Painter Randall, Esq.
Panelists: Monique Ferraro, Paul Ihme, Conor Osthoff and Don Wyper
- This deep dive brings together the state’s foremost cybersecurity and privacy experts to examine the current threat environment and what’s coming next. The panel will explore real-world attack scenarios currently targeting law firms and businesses in the tri-state area, including ransomware-as-a-service operations, supply chain compromises, and AI-enhanced social engineering. You’ll learn how the New Jersey Judiciary defends against millions of daily attack attempts and discover practical strategies for building resilience.
- This deep dive brings together the state’s foremost cybersecurity and privacy experts to examine the current threat environment and what’s coming next. The panel will explore real-world attack scenarios currently targeting law firms and businesses in the tri-state area, including ransomware-as-a-service operations, supply chain compromises, and AI-enhanced social engineering. You’ll learn how the New Jersey Judiciary defends against millions of daily attack attempts and discover practical strategies for building resilience.
- 10:00 a.m. | Keynote: The Privacy Nightmare That Follows — When the Breach Is Just the Beginning
Presented by: Rebecca L. Rakoski, Esq.
- After the ransom is paid, a hidden catastrophe begins. This session explores the 180-day danger zone where privacy violations multiply, leading to massive regulatory penalties and class-action lawsuits. Using a real-world case study, you will learn how plaintiffs build their cases, what happens to your data on the dark web, and how to use a post-breach privacy audit to break the "privacy kill chain" before regulators arrive.
- After the ransom is paid, a hidden catastrophe begins. This session explores the 180-day danger zone where privacy violations multiply, leading to massive regulatory penalties and class-action lawsuits. Using a real-world case study, you will learn how plaintiffs build their cases, what happens to your data on the dark web, and how to use a post-breach privacy audit to break the "privacy kill chain" before regulators arrive.
- 10:30 a.m. | The First 60 Minutes: Inside a Live Ransomware Attack
Presented by: Karen Painter Randall, Esq.
Panelists: Killol Darji; Monique Ferraro; Paul Ihme; Laks Kattalai; Jessica Lewis Kelly, Esq.; Conor Osthoff; Rebecca L. Rakoski, Esq.; and Don Wyper
- Experience a minute-by-minute breakdown of what actually happens during a modern ransomware attack—in the server room and the boardroom. This session reveals the new ransomware playbook, the critical decisions you must make in the first hour, and provides practical, real-world scenarios from recent incidents. You’ll walk away with a 60-minute incident response checklist and a communication tree template to save your firm's reputation.
- Experience a minute-by-minute breakdown of what actually happens during a modern ransomware attack—in the server room and the boardroom. This session reveals the new ransomware playbook, the critical decisions you must make in the first hour, and provides practical, real-world scenarios from recent incidents. You’ll walk away with a 60-minute incident response checklist and a communication tree template to save your firm's reputation.
- 12:00 p.m. | Break
- 12:15 p.m. | Legislative and Regulatory Update
Presented by: John T. Wolak, Esq., CIPP-US
- Navigate the rapidly evolving compliance landscape with a comprehensive update on the federal and state regulations reshaping cybersecurity and privacy obligations. This session decodes the SEC’s new disclosure requirements, the FTC’s enhanced safeguards rule, and the wave of state privacy laws taking effect in 2025, with a special focus on New Jersey legislation and multi-state enforcement trends creating new liability for firms and their clients.
- Navigate the rapidly evolving compliance landscape with a comprehensive update on the federal and state regulations reshaping cybersecurity and privacy obligations. This session decodes the SEC’s new disclosure requirements, the FTC’s enhanced safeguards rule, and the wave of state privacy laws taking effect in 2025, with a special focus on New Jersey legislation and multi-state enforcement trends creating new liability for firms and their clients.
- 1:00 p.m. | Practical Implementation Workshop: Your Monday Morning Action Plan
Moderator: Rebecca L. Rakoski, Esq.
Presenters: Killol Darji; Laks Kattalai; Jessica Lewis Kelly, Esq.; and Karen Painter Randall, Esq.
- This intensive final hour delivers a rapid-fire round of immediately actionable tips and solutions. No theory—just practical wisdom from decades of experience. Learn the five-minute email fix that blocks 90% of phishing, the MFA configurations that actually work, the contract clauses that transfer vendor risk, and the wire transfer protocols that stop the #1 source of law firm losses. You'll leave with a prioritized playbook of security and privacy enhancements you can deploy immediately.
- This intensive final hour delivers a rapid-fire round of immediately actionable tips and solutions. No theory—just practical wisdom from decades of experience. Learn the five-minute email fix that blocks 90% of phishing, the MFA configurations that actually work, the contract clauses that transfer vendor risk, and the wire transfer protocols that stop the #1 source of law firm losses. You'll leave with a prioritized playbook of security and privacy enhancements you can deploy immediately.
- 2:00 p.m. | Adjourn