
Global Compliance
Regulatory compliance when pursuing opportunities across a global market isn't limited to cybersecurity. However, more and more the focus has been on the cyber aspect. With more legislation in more countries than ever before, there is no "one size fits all" solution anymore. Hear from our experts on pitfalls to avoid and successes to model after.

Kristin Judge
CEO, Cybercrime Support Network
Kristin Judge currently serves as CEO of the Cybercrime Support Network (cybercrimesupport.org). To address the needs of cybercrime victims, she founded this nonprofit to work with federal, state and local law enforcement and consumer protection agencies to help consumers and small businesses affected by cybercrime. With their United Way partners, CSN has been awarded over $3M in DOJ federal grants to serve victims and is building the US "Cyber 911" to serve millions of cybercrime and online fraud victims. In 2008. she was elected to serve as a Washtenaw County Commissioner and supported the U.S. Department of Homeland Security in growing cybersecurity outreach to state and local government officials. After elected office, she worked at the Center for Internet Security, focusing on connecting state and local governments to federal services and technology needed to improve cyber security. As Director of Government Affairs at the National Cyber Security Alliance (NCSA), Judge worked with Google, FTC, FBI, SBA, DHS, NIST, congressional leaders and other key stakeholders across the country to educate consumers and businesses how to protect sensitive data.

Sadia Mirza
Attorney, Cybersecurity, Information Governance and Privacy Practice Group, Troutman Pepper
Sadia Mirza is part of the Cybersecurity, Information Governance and Privacy practice group at Troutman Sanders, and is also part of the Financial Services Litigation practice group. She provides strategic privacy compliance counseling, and defends, counsels and represents companies on matters relating to data privacy, data use, and incident response and investigation, with an eye towards helping clients avoid litigation. Additionally, she has experience with the California Consumer Privacy Act of 2018 (CCPA), the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), as well as various other laws concerning privacy and cybersecurity. Mirza's in-house background allows her to understand the issues and concerns clients have and guide them toward resolution in a clear and efficient way. She has worked with clients from a variety of industries, including financial institutions, consumer reporting agencies, insurance companies, healthcare providers, and data and analytics providers. Prior to becoming an attorney, Mirza worked for JPMorgan Chase and Washington Mutual Bank. Her ongoing interest in the financial services industry led her to pursue an LL.M. in banking and finance after graduating from law school.

David Ogbolumani
Chief CyberSecurity & Privacy Officer, IT Security Consultants; former CISO, Kellogg Company
David Ogbolumani was CISO at the Kellogg Company from 2008 till 2013 and has been in consulting practice since then. David has delivered advisory services in Information Security, Infrastructure Engineering, Data Privacy, Network Operations, Project Management, Mergers & Acquisitions, Secure Software Development, Systems Auditing, and Regulatory Compliance to leading organizations including GE, Abbott Lab, BP-Amoco, The World Bank, Northern Trust Bank, JP Morgan, Aon Corp, Phillips Electronics, CNA Insurance, SAIC, SunGard Data Systems, Underwriters Lab, Saudi Aramco, Keane Corp and the US Government. David is a current member of the Academic Advisory Board in the Center for Cyber Security and Forensics Education at the Illinois Institute of Technology which is designated as a National Center of Academic Excellence in Cyber Defense Education by both the U.S. Department of Homeland Security and the National Security Agency (NSA). He was a past Governing Body Member of the Chicago CISO Executive Summit and a member of the Security Advisory Board at the Executive Council.

Imran Ahmad
Partner - Blake, Cassels & Graydon LLP
Imran Ahmad is a Partner at Blake, Cassels & Graydon LLP with a specialization in technology, cybersecurity and privacy law. As part of his cybersecurity practice, he works closely with clients to develop and implement practical strategies related to cyber threats and data breaches. He advises on legal risk assessments, compliance, due diligence and risk allocation advice, security, and data breach incident preparedness and response. In addition, Ahmad acts as "breach counsel" in the event of a cybersecurity incident, such as a data or privacy breach. He also provides representation in the event of an investigation, an enforcement action or a litigation. He is the author of Canada's first legal incident preparation and response handbook titled Cybersecurity in Canada: A Guide to Best Practices, Planning, and Management (LexisNexis, August 2017). He advises on licensing, outsourcing and service-provider arrangements, as well as on other commercial matters with respect to carrying on business over the internet, the cloud and the digital environment. In his privacy law practice, he advises clients on compliance with all Canadian federal and provincial privacy and data management laws. He has a particular focus on cross-border data transfer issues and enterprise-wide governance programs related to privacy and information governance

Robin Gould-Soil
Former Head of Conduct and Chief Privacy Officer, HSBC
Robin Gould-Soil is the former Head of Conduct and Chief Privacy Officer for HSBC Canada. She is a recognized authority on privacy, conduct, data ethics, risk and compliance management with extensive experience consulting on policy and operational guidance to a wide variety of stakeholders group. While at HSBC she was responsible for leading HSBC's Conduct and Privacy function with a focus on delivering fair outcomes to customers without disrupting the integrity of financial markets. Prior to joining HSBC, Robin was the Director of Privacy and Access and Chief Privacy Officer at UHN, as well as the lead for the building Connecting GTA's Privacy and Security program for Ontario's Shared Electronic Health Record. Under her leadership, Connecting GTA received the Privacy Innovation Award presented by the international Association of Privacy Professionals. Gould-Soil also had the privilege to work for the Privacy Commissioner of Canada through a government Executive Interchange Program where she was responsible for opening of the first Toronto Office, leading the privacy investigations unit and being a key spokesperson.
Ruth Promislow
Partner, Commercial Litigation, Fraud and Cybersecurity Practice, Bennett Jones LLP, Toronto
Promislow practices commercial litigation with a strong focus on commercial crime, including cybersecurity, Ponzi schemes, investment fraud, employee fraud and anti-money laundering. She has extensive experience with recovery issues relating to commercial crime, including receiverships, tracing, freezing and recovering proceeds of crime. Promislow oversees and conducts internal investigations for clients, working with internal and external auditors, and works with clients to develop and implement comprehensive and effective action plans following a cybersecurity or other fraudulent attack. She also advises on steps to prevent against such attacks.

Jaymin Desai
Offering Manager, OneTrust
Desai serves as the Offering Manager at OneTrust VendorpediaTM - part of the largest and most widely used technology platform to operationalize third-party risk, security, and privacy management. In his role, Desai is responsible for driving the development and delivery OneTrust's third party risk management product as well as driving the refinement of the toolset and offerings. He works with clients to centralize their vendor information across business units, assess risks based on use cases and relevant standards like CSA, CAIQ, SIG, GDPR and CCPA while also monitoring threats to seamlessly mitigate vendor risks throughout the engagement lifecycle. Desai takes a customer-based approach to product development and derives the majority of his backlog from customer feedback and direction.

Jake Olcott
VP, Communications & Government Affairs, BitSight
For years, Jake has helped organizations create sustainable third party risk management programs.
Jake has held a number of leadership roles at BitSight since joining the company in 2015. Prior to BitSight, Jake served as cybersecurity attorney to the Senate Commerce Committee and House Homeland Security Committee. He previously consulted with Fortune 1000 executives on cyber risk management and served as an adjunct professor at Georgetown University.
He holds degrees from the University of Texas at Austin and the University of Virginia School of Law.
Session Contributors
Chief CyberSecurity & Privacy Officer, IT Security Consultants; former CISO, Kellogg Company
Read BioPartner, Commercial Litigation, Fraud and Cybersecurity Practice, Bennett Jones LLP, Toronto
Read BioAttorney, Cybersecurity, Information Governance and Privacy Practice Group, Troutman Pepper
Read Bio