Risk

AI-powered vulnerability discovery is no longer theoretical. Anthropic's Mythos has put a spotlight on how quickly advanced AI can identify security weaknesses, forcing business and technology leaders to rethink cyber risk. Tune in for a practical discussion on what Mythos means, why it matters, and what organizations should do now to strengthen vulnerability management, incident response readiness, governance, and executive cyber visibility.
Moderator:@Daryl Irby - Vice President, Business Development, SecurIT360 
Speakers:@Josh Aaron - CEO, Aiden Technologies, Inc.@David Forrestall - CEO, SecurIT360
Recorded on 07-29-2026.

Legal professionals are increasingly using AI to build internal automations, workflow tools, and client-facing applications, often without the involvement of the IT or security departments. This episode examines what happens when "vibe coding" meets the legal environment: client data handled by code nobody fully understands, third-party dependencies nobody vetted, and compliance obligations nobody mapped.  Listeners will leave with practical tips for enabling AI-assisted code development without abandoning their duty of care.
Moderator:@Jack Recinto - Director of Applications, Ice Miller LLP
Speaker:@Ken Fishkin - Associate Director of Information Security, Lowenstein Sandler LLP
Recorded on 07-08-2026.

The GC comes to you with a difficult problem: “How could you detect and stop this?”
In May, the SEC charged 21 individuals in an insider trading scheme led by an M&A attorney who built a global network that included other attorneys. While technology can't prevent every bad act, it can play an important role in identifying risks and strengthening controls.
Tune in to this episode for a lively discussion and practical insights on what you can do to help mitigate these threats.
Moderator:@Scott Christensen - Founding Partner, Kyndig Consulting  
Speakers:@David Forrestall - CEO, SecurIT360@Reggie Pool - Practical IG LLC, Principal
Recorded on 06-08-2026.

This episode explores the often-overlooked vulnerabilities in third-party relationships that can expose your firm to data breaches, operational disruptions, and regulatory penalties. Listeners will learn how to move beyond static, one-time assessments to a proactive, continuous monitoring framework that addresses hidden risks, including those during vendor onboarding and offboarding. Moderator:Kevin J. Foster, Sr., Director Cybersecurity Operations, White and Williams LLP Speaker:Azam Shaikh, Sourcing & Procurement Leader, Baker Botts L.L.P. Recorded on 04-23-2026.

In this podcast, the speaker shared key predictions on cybersecurity threats in 2025 and offered practical suggestions for staying well-informed amid constant changes.
Moderator:@Kevin Foster - Director Cybersecurity Operations, White and Williams LLP    
Speaker:@Jeffrey Wheatman - SVP, Cyber Risk Strategist, Black Kite
Recorded on 09-26-2025.

In this session, we dove into the critical topic of what obligations we have to track personal information (PII, PHI, PCI, PBI) that firms are storing. We explored effective strategies for tracking this sensitive data and discussed the best practices businesses can implement to ensure compliance. Learn how to report this information accurately to clients and risk insurance companies, while minimizing risks and maintaining data security. Whether you're in a small firm or large enterprise, this episode offers valuable insights on safeguarding personal data and meeting reporting requirements.Moderator:@Madeleine La Cour- Director, Business Intake and Records, Baker Botts L.L.PSpeaker:@Randy Curato- Vice President-Senior Loss Prevention Counsel, ALAS, LtRecorded on 02-19-2025.

Zoom Rooms, Teams Rooms, Owl Cams, Smart Mics, what are the new emerging technologies to enable real time collaboration and what risks and caveats do they come with?    How do we make spaces that quickly (instantly?) flip from comfy team collaboration rooms to an extension of the court? 
Moderator:@Thomas Witherspoon - Senior Systems Support Engineer, Sidley Austin LLP 
Speakers:@Thomas Burns - Senior Account Manager AVI Systems-Transforming Business with Technology Solutions, AVI Systems @Jesse Dominguez - Sr. Design Engineer, Facility Solutions Group, FSG  @William Grady - Director of Information Technology, Conn Kavanaugh Rosenthal Peisch & Ford LLP  
Recorded on 01-15-2025.

The Digital Operational Resilience Act (DORA) is an EU regulation that will apply as of January 17th, 2025. Its goal is to strengthen the overall information and communication technology security of financial entities in the remit of the 3 ESAs and ensuring that the financial sector in Europe is able to stay resilient in the event of a severe operational digital disruption. In this podcast, we hope to learn more about how DORA will specifically impact law firms that work with banks.
Moderator:@Leigh Zidwick - Sr Director Info Governance, DLA Piper LLP (US)  
Speaker:@Jonathan Armstrong - Partner, Punter, Southall Law
Resources:FAQS - EU DORA Regulation & Operational Resilience Requirements - Punter Southall LawDORA Legislation 
Recorded on 11-04-2024.

In this podcast interview, the speaker will highlight in-depth what are the risks in the use of ChatGPT for corporations.  
Questions the moderator will ask the speaker:
-We are hearing a lot about Generative AI and AI assistants like ChatGPT. Is this another hype as Blockchain and Metaverse?-If it is something that will stay. What is the probable impact on the legal world?-A lot of people and companies are concerned about data privacy. What is true and what is false in this theme?-How do we use that? I see that some lawyers in the US had issues using that in the wrong way.-How do we get updated about this technology?
Moderator:@Marcelo Cardoso - Legal Ops Supervisor, Mercado Livre
Speaker:@Leonardo Toco - Founder and CEO at GPTLAW - a LegalTech focused on GenAI 
Recorded on 10-12-2023

Are controlled phishing campaigns against your members the best way to keep your respective firm secure from phishing? This podcast session will look at phishing simulation tools, their overall pros/cons and alternatives available to keep your members secure from getting hooked with that phish.Questions the moderator asked the speaker: 1. Phishing is thought to have originated in 1995 and love bug struck in 2000. Here we are today in 2023 and phishing is still our number one vector of compromise. We've been able to reduce the risk of malware: why is phishing such a struggle?2. All security programs preach the importance of user awareness training, and it's been a requirement of clients and regulations for many years now. The majority of user awareness programs utilize phishing simulations. So, I guess the questions is, Are phishing campaigns still a good route forward? Are they being successful at training our users not to fall for that phish?3. What's the best approach for including phishing awareness into your program? Is it best to continuously cast a line or occasionally try your luck at the phishing hole?4. I've been hearing more lately about User coaching and how technology can be leveraged to protect users from themselves while presenting coaching opportunities when they do things that they shouldn't. Is this a strategy that's effective in reducing the risk of phishing? I'm not sure it would be a technology talk if we didn't speak about AI. How do you feel the future of AI impacts the threat of phishing and what steps should we be thinking about now to try and get in front of it?Moderator:@David Whale - Director Information Security, Fasken Martineau Dumoulin LLPSpeaker:@Manuel Sanchez, Information Security & Compliance Specialist, iManageRecorded on 06/27/2023

Legal Operations is a broad emerging discipline that encompasses all aspects of the business of law including litigation support, technology, service delivery and more. Thus, eDiscovery is a major operational consideration for law firms and corporate law departments tasked with managing and securing data. Organizations typically handle eDiscovery along a spectrum where they insource or outsource certain elements of the process. What are the risks and benefits of different eDiscovery service models? How might development of key personnel to manage aspects of service give firms a competitive advantage?
Questions Ann asked the speakers:
-How would you describe the significance of eDiscovery services as a component of legal operations for a law firm or corporation?
-What are some of the costs associated with developing talent to manage eDiscovery within the firm, and how are those costs justified?
-What additional considerations should be weighed when determining how much of the eDiscovery process to insource?
-Once you start a team, how can you grow the team and what additional areas could the group serve?Moderator:
@Ann Halkett - Director, SOLVED eDiscovery Services, a division of AHBL MLPSpeakers:
@Joy Holley - Legal Operations Consultant, Vertex Advisor
@Richard Robinson - Director of Legal Operations and Litigation Support, Toyota North AmericaRecorded on 05/24/2023