A cybersecurity incident tests every governance and compliance choice a company has made before the event ever occurs. General counsel are expected to lead through the crisis. They coordinate technical, legal, and business decisions under uncertainty, protecting privilege as the investigation unfolds, and meet a shifting set of notification obligations. Join Wilson Sonsini and Jack Nelson, Chief Information Security Officer of Ivanti, for a lunchtime CLE program. The panel will guide general counsel through a cybersecurity crisis from the first hour through disclosure and remediation, with legal and security perspectives side by side. 

Key topics include:

• Building a defensible security program, including “reasonable security” obligations and how Utah’s Cybersecurity Affirmative Defense Act rewards preparation and reporting. 
• Partnering with Chief Information Security Officers on decision rights, escalation, and what each side needs from the other before, during, and after an incident.  
• Leading the first hours of a crisis, including command structure, evidence preservation, engaging outside counsel, and the GC’s role in decision making. 
• Using forensic investigators and deciding whether to put findings in a written report, including how courts have divided on privilege for those reports. 
• Managing notifications and communications across regulators, insurers, customers, and the board. 
• Understanding the lawyer’s own competence, confidentiality, and supervision duties under the Utah Rules of Professional Conduct. 
• Real-world lessons from recent, high-profile incidents, where response conduct and documentation were pivotal to the incident outcome. 

Attendees will gain a practical framework for leading a defensible cybersecurity response, protecting legal privilege, and supporting sound governance and disclosure decisions under pressure.