On November 24, 2025, President Trump signed an Executive Order, Launching the Genesis Mission, which establishes a national effort to use artificial intelligence to accelerate scientific discovery and strengthen U.S. capabilities in key technology domains. Substantively, it places AI where
Business Cyber Risk
The Business Cyber Risk blog, published by Spencer Fane LLP, focuses on legal issues related to cybersecurity and data protection for businesses. It covers topics such as regulatory compliance, cyberattack prevention, insider threats, and the intersection of emerging technologies like artificial intelligence with legal frameworks. The blog also discusses strategic considerations for managing cyber risk, including governance and alignment between legal and security teams. It provides insights on recent legal developments, enforcement actions, and best practices to help organizations mitigate cyber threats and navigate evolving cyber risk landscapes.
Blog Authors
Latest from Business Cyber Risk
EDPS Refines Generative AI Guidelines: A Blueprint for Lawful Innovation in the EU
October 29, 2025 — In a significant move toward harmonizing artificial intelligence with data protection principles, the European Data Protection Supervisor (EDPS) has released updated guidelines aimed at ensuring the lawful use of generative AI across EU institutions. These revisions…
🎙 Podcast Feature: Defenders in Lab Coats | The Legal (+Cyber) POV Playbook
I recently had the pleasure of joining Reanna Schultz on the Defenders in Lab Coats podcast (Season 2, Episode 16) to discuss my book, The GC + CISO Connection: Uniting the Defenders of the Organization (link). In this episode, we…
Texas Developer Sentenced to 4 Years for “Kill Switch” Cyberattack on Former Employer
A former Eaton Corp. software developer received a 4-year federal prison sentence for deploying a “kill switch” that locked out thousands of users and caused over $360,000 in damages. Learn what happened and key lessons for businesses to prevent insider…
Trick or Treating, Cyber Villains, and Coffee: My Time on Counsel Brew
I recently had the pleasure of joining Shereen El Domeiri and Nicola Hobeiche on their fantastic podcast, Counsel Brew, for Episode 36: “Trick or Treat – Shawn Tuma.” Let me tell you—it was an absolute blast! From the moment we…
Privilege Requires Precision: Sixth Circuit’s Reminder for Internal Investigations
In a recent decision, the Sixth Circuit offered a timely reminder for legal teams conducting internal investigations: attorney-client privilege is powerful—but only when used with precision. In In re FirstEnergy Corp., No. 24-3654, 2025 WL 1234567 (6th Cir. Aug. 7, 2025), the…
MEMO TO: “The IT Guy” – It is a Crime to Sabotage Your Company’s Network on Your Way Out the Door!
A former First Republic Bank employee [cloud engineer] who sabotaged the company’s computer network after being fired for accessing pornography on a work computer has lost an appeal challenging his conviction and nearly $530,000 in restitution.* * *Brody was indicted…
***URGENT*** MEMO TO: “The IT Guy” Re T/A Negotiations After Ransomware Attack
Here’s a pro tip for “The IT Guy” or MSP whose customer has just been hit with ransomware, when it was their responsibility to protect against it: No matter how strongly you may feel about this issue, when your client…
The Importance of GC+CISO Relationships in Cybersecurity (a New Project)
In early June 2024, my friend David Malicoat graciously invited me to be a guest on The Professional CISO Show and, while I was incredibly honored, I was a bit hesitant as well. I had just begun working on a…
Texas Attorney General Issues Consumer Alert Warning Texans of Potential Scams Following Nationwide CrowdStrike Outage
FOR IMMEDIATE RELEASEJuly 19, 2024www.texasattorneygeneral.govPRESS OFFICE: (512) 463-2050Communications@oag.texas.gov Attorney General Ken Paxton Issues Consumer Alert Warning Texans of Potential Scams Following Nationwide CrowdStrike Outage AUSTIN – Texas Attorney General Ken Paxton warned Texans of potential scams following the widespread CrowdStrike…