In this course, students will learn the basics of cybersecurity in the energy industry, key concepts and terminology, what happens in the event of a data breach and the legal and practical considerations in responding to the breach, the role of the lawyer, senior management, and the board concerning cybersecurity.

Our faculty will provide an update on the current status of data privacy laws, as well as current trends. They will also cover vendor and supply chain management, and cyber insurance. Our program will wrap up with a discussion of artificial intelligence in the energy industry.

Please note: All times listed below are Pacific Time.

March 24:

12:00 – 12:45 PM: Registration and Lunch

12:45 – 1:00 PM: Introduction

1:00 – 1:30 PM: Keynote Address

1:30 – 3:00 PM: What is Cybersecurity?

• Basic concepts (what are the threats, what are we trying to protect, how do we protect it, what are the major statutory and regulatory principles, etc.)
• Key Terminology

3:15 – 4:15 PM: Data Breach and Breach Response

• What happens in a data breach (with a particular focus on ransomware)
• Legal, operational, commercial, and other risks
• Due diligence and legal minimum requirements before, during, and after a breach
• Key steps in responding

4:15 – 5:15 PM: Role of Lawyer, Senior Management, and Board

• The lawyer’s obligation for his or her own practice and office (including professional ethical obligations)
• Counseling the C-suite
• Protecting attorney-client privilege
• Applicable standard of care (business judgment rule, fiduciary duty)
• What senior management and board should be doing now

March 25:

8:00 – 8:15 AM: Welcome, Introduction, and Recap

8:15 – 9:15 AM: Artificial Intelligence in the Energy Sector

• What AI is and how it is used in the energy sector
• Current status of regulation of AI

9:15 – 10:00 AM: Vendor and Supply Chain Management

• Key commercial considerations
• Current regulatory environment

10:00 – 10:45 AM: Cyber Insurance

• What it covers – and what it doesn’t
• Practice pointers

9:15 – 10:00 AM: Data Privacy

• The legislative response – federal vs. state
• Trends – CA vs. GDPR
• PCI compliance

12:00 – 12:15 PM: Conclusion