


Balancing Legal Caution with Effective Incident Response
with Raf Sanchez , Francisco Donoso and Carolyn Purwin Ryan
About this Session
As cyber incidents grow more complex, incident response teams often find themselves caught between the need to document actionable lessons for preventing future breaches and legal counsel’s preference to minimize written records. Clients frequently ask for detailed reports explaining “how this happened and how to prevent it from happening again” to justify security investments to leadership, while legal teams prioritize limiting liability exposure. Navigating these competing priorities is one of the most challenging aspects of modern incident response.
This session will explore:
- How incident response teams and legal counsel can collaborate to drive better outcomes
- Strategies for documenting incidents to support resilience while managing legal risk
- Balancing client’s needs for actionable insights with legal considerations
- Key differences in incident response and legal strategies between the US and international environments
Our expert speakers will provide actionable insights for bridging the gap between security and legal priorities, helping organizations protect both their security posture and their legal interests. Whether you’re a CISO, incident responder, or legal professional, you’ll gain valuable perspectives on aligning operational effectiveness with legal constraints.
Perfect for: CISOs, Security Leaders, Incident Response Teams, Legal Counsel, Risk Management Professionals, and anyone involved in security incident management.