Legal Seminar, Chicago, IL

Incident Response

 Develop data breach security policy  Identify outside counsel  Identify forensic firm  Identify PR team  Prepare document retention notices so employees know what to preserve  Identify person in charge to make decisions about forensics, counsel, and notices

 Take control of internal audits to maintain privilege  Preserve privilege during investigation of cybersecurity incident  Counsel is integrally involved in gathering information  Counsel is the liaison with forensic firm  Participate in interviews with employees to gather information and maintain privilege Counsel’s Role