Technology Law and Digital Law

Cyber threats are evolving rapidly, with attackers leveraging AI and sophisticated tactics to target organizations across entire sectors. Business leaders must understand that responding to a cyber incident requires coordinated action across legal, technical, communications, compliance, and operational teams—not just IT recovery. This guide examines how companies can prepare for ransomware attacks, nation-state campaigns, vendor risks, and the long-term legal and regulatory consequences that extend fa

The Cybersecurity and Infrastructure Security Agency has moved its final rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 to the Office of Management and Budget for review, marking the last major regulatory step before publication. With approximately 316,000 entities across 16 critical infrastructure sectors potentially subject to mandatory cyber incident reporting requirements, organizations need to understand the compliance obligations and prepare their incident respo

The New York State Department of Financial Services has issued new guidance identifying the most common deficiencies it encounters in cybersecurity risk assessments required under Part 500. Based on examinations and investigations, NYDFS outlines five recurring gaps and establishes clear expectations for how covered entities should design, conduct, and document risk assessments that inform their cybersecurity programs.