Law Academy Course 105

Cybersecurity in the Energy Industry

Course 105

In Course 105, students will learn the basics of cybersecurity in the energy industry. We will discuss the basic concepts, including key terminology, of what cybersecurity is. Our faculty will then address what happens in a data breach, and the legal and practical considerations in responding to the breach. We will explore the role of the lawyer, senior management, and the board concerning cybersecurity. Our faculty will provide an update on the current status of data privacy laws, as well as current trends. They will also cover vendor and supply chain management, and cyber insurance. Our program will wrap up with a panel featuring presentations on cybersecurity in the oil, natural gas, electric utility, hydro, and nuclear industries. Our program will feature a keynote speech by a governmental official involved in cybersecurity.

Energy Law Academy Certificate of Achievement: Course 104 or 105 is a requirement to obtain the Energy Law Academy Certificate of Achievement.


What Is Cybersecurity?

  • Basic concepts
    1. what are the threats
    2. what are we trying to protect
    3. how do we protect it
    4. what are the major statutory &regulatory principles
  • Key terminology

Data Breach and Breach Response

  • What happens in a data breach (focus on ransomware)
  • Legal, operational, commercial, and other risks
  • Due diligence and legal minimum requirements before, during, and after a breach
  • Key steps in responding

Role of Lawyer, Senior Management, and Board

  • The lawyer’s obligation for his or her own practice and office (including professional ethical obligations)
  • Counseling the C-suite
  • Protecting attorney-client privilege
  • Applicable standard of care (business judgment rule, fiduciary duty)
  • What senior management and board should be doing now

Data Privacy

  • The legislative response – federal vs. state
  • Trends – CA vs. GDPR
  • PCI compliance

Vendor and Supply Chain Management

  • Key commercial considerations
  • Current regulatory environment

Cyber Insurance

  • What it covers – and what it doesn’t
  • Practice pointers

Energy Sector Panel

  • Oil
  • Natural Gas
  • Electric Utility
  • Hydro
  • Nuclear