SlideShare a Scribd company logo
1 of 35
Download to read offline
Forensic Technology Team Overview
OVERVIEW
2
 Global strategic advisory and expert
consulting firm that provides independent
advice, investigations, data analytics,
authoritative studies, expert testimony,
and regulatory and dispute consulting
 Headquartered in Emeryville, California,
with offices in the United States, Australia,
Canada, Latin America, and the United
Kingdom
 Expertise spans economics and finance,
digital and cyber forensics, data analytics,
investigations, and public policy in
BRG employs over 700 professionals in 25 offices
many of the major sectors of the economy, including banking, healthcare, information
technology, energy, construction, and real estate
 More than 300 BRG experts supported by more than 400 highly trained and well-
credentialed staff
BRG Offices
BRG’s Technology Professionals
4
 BRG’s Forensic Technology Team includes members from a variety of backgrounds, including forensic
investigators, federal prosecutors, corporate litigators, information security experts, court appointed
eDiscovery experts and thought leaders.
 Certifications held by our team include the following:
BRG Team Members Are Industry Leaders
Certified Anti-Money Laundering Specialist Certified Computer Examiner
Cisco Certified Network Associate Certified Data Processor
Certified Electronic Discovery Specialist Certified Forensic Computer Examiner
Certified Fraud Examiner Certified in Financial Forensics
Certified Internal Auditor Certified Information Privacy Professional
Certified Information Systems Auditor Certified Information Systems Security Professional
Certified Information Technology Professional Certified Management Accountant
Certified Public Accountant Certified Records Manager
EnCase Certified Examiner Enterprise Risk Management Certified Professional
Information Technology Infrastructure Library Microsoft Certified Solutions Expert
OMG Certified Systems Modeling Professional Private Investigator
Forensic Technology Services
Digital Forensics
& Investigations
eDiscovery Structured Data Analytics
Information Governance Cyber Security
How we can help across the EDRM
BRG’s team of data acquisition experts has extensive experience planning,
executing and managing forensically-sound data collection and
preservation of large and complex data sets; BRG likewise offers expertise
in complex structured data analysis/reporting.
Data
Identification,
Collection;
Database
Analytics
Initial Evidence
Assessment
BRG’s team utilizes best-in-class software to process and extract evidence
silos and report on data reliability and suspicious activities.
Project
Management
Expert
Testimony
BRG provides end-to-end project management support, from legal hold
issuance through data collection, processing, hosting, document review and
production.
BRG team members have testified as experts in federal and state courts,
as well as alternative dispute resolution fora; we have also served as court-
appointed neutral experts.
Information
Governance/
Management
BRG’s team has extensive experience in defensible disposition and
remediation, records retention, data privacy, social media & BYOD policies,
eDiscovery readiness and litigation hold best practices.
Processing, ECA,
Hosted Review
BRG provides defensible processing and deduplication of ESI and consults
on search technology and methodology; managed Relativity service
provider supplies BRG with secure hosted architecture and best-of-breed
analytics along with technology assisted review (TAR) tools and support.
Illustrative Technology Services
Digital Forensics and Investigations
• Computer and mobile forensics
• Internal investigations
• File server and cloud-based
network capture/analysis
• Corporate espionage and data
breach investigations
• Source code comparison
• Independent oral testimony and
written reports
• Metadata analytics
• IP/Trade secret theft analysis
• Timeline analysis and reporting
• Log analysis
S E R V I C E S
S E R V I C E S
eDiscovery Consulting
• Discovery program assessment
• Legal hold and collection
technology selection and
implementation
• Litigation project and case
management
• Discovery project management,
hosting and analytics
• Discovery guidelines and
playbook
• Expert and 30(b)(6) testimony
• Court-appointed neutral (discovery
dispute resolution)
• Predictive coding and Technology
Assisted Review (TAR)
Cyber Security
DESIGN
• Enterprise security design
• Security architecture
• Security product evaluation
• Security product selection
IMPLEMENT
• Perimeter defense
• Network defense
• Employee training
• Software defense
• Data Security
ASSESS
• Network, Application and Data
Vulnerability Testing
• Continuous monitoring
• Penetration Testing
MANAGE
• Incident response
• Data breach investigations
• Vulnerability management
ASSURE
• Compliance
• Assessment
• Audit
S E R V I C E S
Information Governance
• Data mapping and system
overviews
• Records retention policies and
schedules
• Defensible data disposition and
destruction
• Certified summary reporting
• Data privacy and state secrets
compliance consulting
• Email management strategy and
policies
• BYOD, social media and exit
interview policies
• Implementation, training and
change management
• Cross-border data identification
and transfer
• Litigation and regulatory
readiness/preparedness
S E R V I C E S
Structured Data Analytics
• Database collections and mining
• Analytics and reporting
• Database production
• Consolidation and standardization
of disparate data sources
• Text analytics and unstructured
data analysis
• Custom automation
• Big data migration and analysis of
structured data
• Dashboarding
• Data sampling and modeling
• Structured data review, redaction
and culling
Selected Bios
Michael R. Bandemer
Managing Director
619.823.8867 | mbandemer@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Michael Bandemer is a Managing Director with Berkeley Research Group and leader of its Discovery and Technology Practice which
specializes in e-discovery, digital forensics and investigations. Prior to joining Berkeley Research Group, Mr. Bandemer was a Managing
Director with Huron Legal, an international advisory and business services firm, and previously the national practice leader of LECG’s
Legal Technology and Analytics Consulting group (LTAC) which specialized in e-discovery, digital forensics and data analytics and
provided strategic consulting, expert testimony and services to corporations and law firms across all phases of discovery.
Mr. Bandemer advises both corporate and law firm clients and provides expert testimony regarding various information management and
legal technology issues including internal discovery processes, procedures, best practices, evidence preservation and collection,
computer forensics, electronic discovery, complex data analytics, and other information technology issues.
Mr. Bandemer has qualified in court as an expert in e-discovery and computer forensics and provided testimony at deposition, arbitration
and federal and state court. He has been selected as an independent e-discovery expert and has served as a 30(b)(6) corporate
representative, special master and court appointed third-party neutral in various engagements. In these matters Mr. Bandemer has
addressed discovery issues concerning records management, accessibility, burden, preservation, collection, spoliation, search and
production.
The diverse range of matters Mr. Bandemer has assisted with includes misappropriation of trade secrets, internal investigations, breach
of contract, business interruption, employment disputes, fraud investigations, securities, and wage and hour class actions among others.
He has experience in a broad spectrum of industries including high technology, financial services, construction, professional services,
gaming, hospitality, entertainment, oil and gas, government, retail, auto, railroad, entrepreneurial business, manufacturing, and real
estate.
PROFESSIONAL AFFILIATIONS
• American Institute of Certified Public Accountants
• High Technology Crime Investigation Association
• California State Society of Certified Public Accountants
• The Sedona Conference Working Group: Electronic
Document Retention and Production
• Association of Certified Fraud Examiners
• Association of Records Managers & Administrators
• Institute of Management Accountants
• Association for Information and Image Management
Geoffrey “Geo” Brown
Director | San Diego
619.717.0407 | gbrown@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Geoff has more than 15 years of experience in information technology and over 10 years of experience in digital forensic collection and
analysis, data analytics investigations, and eDiscovery. Geoff has performed hundreds of computer forensic investigations, performed
onsite analysis of cyber security breaches, and has assisted both corporate and law firm clients with the preservation and management
of large volumes of data in response to civil litigation, government inquiries and internal investigations. He has significant experience
leading highly sensitive and complex matters ranging from misappropriation of trade secrets, internal investigations, breach of contract,
business interruption, employment disputes, fraud investigations, securities, and wage and hour class actions among others in a wide
variety of industries.
CLIENT EXPERIENCE
Geoff brings extensive success and experience in providing cost effective, defensible analysis, and consulting in areas including:
• Forensic preservation including computers, servers, smart phones
• Forensic analysis on Windows and Apple operating systems
• IP theft and employee investigations
• Time-line analysis and reporting
• Server log analysis
• Incident Response computer forensics
• Data Analysis
• E-discovery processing, search-term analysis, and review consulting
• Project management
• Expert witness testimony
PROFESSIONAL AFFILIATIONS
• EnCase Certified Examiner (EnCE)
• High Technology Crime Investigation Association
• Cisco Certified Network Associate (CCNA)
• Certified Computer Forensics Examiner (CCFE)
• Microsoft Certified System Engineer (MCSE)
Alexander Carte
Managing Director
+44.0.203.597.5160 | acarte@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Alexander Carte is a leader of BRG’s UK Forensic Technology practice. He has over a dozen years of experience in electronic
disclosure/discovery, electronic evidence and IT systems, IT security, data modeling and analytics, information governance and
computer forensics. He was previously a partner at and led the national Forensic Technology practice for a UK accountancy firm.
Mr. Carte has advised global law firms, multinational corporations, government regulators and agencies, and private individuals in a
range of matters in jurisdictions worldwide. These engagements have encompassed expert support on electronic evidence and
electronic search, electronic disclosure and discovery process and proportionality, review and advisement on IT systems and security,
and investigations on computer systems for internal and external requests.
Mr. Carte has provided advice and reporting to company boards, government regulators and investigatory bodies, the UK High Court,
foreign courts up to the Supreme Court, legislative boards of enquiry and company administrators and liquidators. His cases have
covered business sectors including reinsurance, air transport, freight and shipping, financial services, pharmaceutical, manufacturing,
information technology, construction and reinsurance.
PROFESSIONAL AFFILIATIONS
• British Computer Society Professional
• Society of Expert Witnesses
• Society for Computers and Law
• ARMA International
• Association of Certified Fraud Examiners
Christopher H. Carter, JD
Director | Houston
713.481.9438 | ccarter@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Chris Carter advises clients on information technology governance and maturity, portfolio/program/project management, and building
and maintaining high-performance technical teams. Mr. Carter has split his career between internal IT and consulting, resulting in a
balanced, pragmatic, real-world approach in addressing challenges clients face in IT governance structuring. With significant experience
in the oil/gas and telecommunications industries, he has led major, transformational system implementations, built and rebuilt technology
support functions, and implemented innovative governance structures to position IT as a competitive advantage.
CLIENT EXPERIENCE
Mr. Carter has advised companies in implementing various systems from ERPs (enterprise resource planning) to OSS (operational
support systems), as well as data warehousing and data-mining solutions. In addition to his systems design and development expertise,
he has led multiple maturity projects implementing Information Technology Infrastructure Library (ITIL) ideal processes. He also has
Sarbanes- Oxley IT general controls (SOX ITGC) audit and compliance experience, and has advised organizations in adopting next-
generation computing resources (cloud, virtualization, PaaS).
Most recently, Mr. Carter has focused on mentoring high-performance teams, including developing non-traditional and soft skills in
technical individuals.
PROFESSIONAL AFFILIATIONS
• Member, Association of Information Technology Professionals
• Member, TechExecs
• University of Kansans Alumni Association
Fred J. Charlot
Director | Houston
713.493.2538 | fcharlot@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Fred Charlot advises clients on security-based risk management, information assurance, and cybersecurity. Mr. Charlot has experience
leading teams responsible for identifying, classifying, and analyzing security weaknesses, as well as discovering new solutions for and
recommending proven technologies to defend against emerging security threats. He has provided strategic project planning, design,
analysis, and integration services for information systems to government entities and commercial industries.
CLIENT EXPERIENCE
Mr. Charlot has led the development of corporate-level security roadmaps and implementation plans for large systems incorporating
commercial and government off-the-shelf technology and in-house technology. He has 25 years of experience in the information
technology field, building information assurance throughout the system life cycle, including planning, design, development, testing,
deployment, and operations. He has knowledge and background in network infrastructure, virtualization, application development,
client/server administration, and database management.
Mr. Charlot uses Health Insurance Portability and Accountability Act (HIPAA) specifications, the National Institute of Standards and
Technology’s 800 Series, the International Organization for Standardization and International Electro-technical Commission’s ISO/IEC
27K, PCI Data Security Standard (DSS), and COBIT to evaluate security programs and advise on appropriate controls to mitigate
security risks. He has directed tactical and strategic activities for security operations centers, communication-security (COMSEC)
management, incident response, compliance management, threat management, and customer infrastructure and data.
PROFESSIONAL AFFILIATIONS
• Certified Information Systems Security Professional, CISSP
• Certified Information Systems Auditor, CISA
• Certified Information Privacy Professional
• Information Technology Infrastructure Library certified
Adam I. Cohen
Managing Director
646.651.4643 | acohen@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Adam Cohen is a Certified Information Systems Security Professional (CISSP) and former practicing attorney who for more than 20
years has advised clients on the intersection of technology and law. His practice spans cybersecurity, electronic discovery, and
enterprise information management. In addition to being an experienced consultant and counselor, he is a prolific author and lecturer
whose work has been cited in several landmark federal court opinions. He has served as a court-appointed neutral eDiscovery expert in
the U.S. District Court, Southern District of New York and is an active member in professional organizations and educational institutions.
Soon after graduating from Duke Law School, Mr. Cohen became a litigation partner with one of the largest law firms in the world. With
his then partner, he coauthored Electronic Discovery: Law and Practice, a treatise cited in seminal federal court opinions such as
Zubulake v. UBS Warburg, Lorraine v. Markel, and others (including a Circuit Court of Appeals opinion on data privacy). Mr. Cohen also
represented some of the largest and best-known corporations in the world in complex litigation involving technology issues.
In 2006, Mr. Cohen joined a global business advisory firm as a senior managing director, where he helped develop the firm’s eDiscovery
and information management segment. In 2011, he joined a leading professional services organization as a principal (a non-CPA
partner) in the Forensic Technology and Discovery Services sub-practice of the Fraud Investigations and Dispute Services group, where
he broadened his practice to include cybersecurity. He obtained his CISSP certification in 2014.
Mr. Cohen teaches courses designed to prepare the next generation of lawyers for the challenges technology poses to the legal process.
He is an adjunct faculty member at Fordham University School of Law and has lectured and/or taught courses at several law schools,
including Harvard University and Georgetown University.
PROFESSIONAL AFFILIATIONS
• New York State Bar Association Chair Emeritus, E-Discovery
Committee
• Georgetown Law Cyber Security and Advanced E-Discovery
Institute Advisory Board
• Defense Research Institute Data Security and Management
Committee, Member
• American Bar Association
• Sedona Conference Working Groups 1 and 11
Dean Christopher
Senior Managing Consultant | Chicago
312.429.7952 | dchristopher@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Dean Christopher has more than 9 years of experience assessing client discovery needs and developing tailored solutions to achieve
high levels of cost savings and efficiencies. Dean works extensively with corporate legal and IT departments to design and implement
practical and sustainable solutions to address the challenges associated with the constantly evolving discovery landscape. He focuses
on assisting clients in identifying opportunities for optimization, from legal hold issuance through data collection, processing, document
review, and production.
CLIENT EXPERIENCE
Prior to joining Berkeley Research Group, Dean was a manager within the discovery consulting practice at Huron Consulting Group.
Dean works with clients in a variety of industries including telecommunications, energy, pharmaceutical, and financial services, with a
focus on the strategic use of technology, people, and processes. Representative examples of his engagement experience include:
• Evaluated the in-house data collection and processing practices of a Fortune 50 Financial Services company to identify areas for cost
savings, increased defensibility, and enhanced process efficiencies.
• Conducted an end-to-end discovery readiness assessment for a Fortune 50 Energy company, including review of existing staffing,
discovery workflows, and associated technologies. Drafted business requirements for legal hold and collection workflows and led the
RFP process for tool selection.
• Collaborated with in-house counsel, external counsel, and vendors, while serving as the central point of coordination for discovery
management, from collection through production, on 30+ legal matters for a Fortune 10 Energy company.
PROFESSIONAL AFFILIATIONS
• Association of Certified E-Discovery Specialists, CEDS
Norman L. Comstock, Jr.
Managing Director
713.493.2527 | ncomstock@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Norman Comstock advises clients on enterprise risk management, information technology governance, technology assurance, program
management, and cybersecurity. Mr. Comstock has experience leading complex, high-profile projects and initiatives for investment due
diligence, integration, divestitures, and program management for high-risk, multiyear, multi-vendor projects. He has advised clients
across diverse industries and geographies including construction, energy, financial services, healthcare, higher education, high
technology, and manufacturing, as well as state, local, and federal governments.
Mr. Comstock advises clients on aligning IT with business strategies, creating clear IT roadmaps to support organizational business
objectives, and transforming business processes to optimize outcomes. He facilitates requirements definition among key stakeholders to
reduce surprises and foster sustainable change management that is technology agnostic. As a nationally recognized business
intelligence (BI) professional, Mr. Comstock is also proficient in data warehousing, analytics, and reporting solutions.
In the past decade, Mr. Comstock has specialized in cybersecurity risk mitigation. He has advised clients on network and application
vulnerabilities, penetration testing, social engineering exploits, and growing compliance requirements that blur the lines between security
and privacy concerns.
Mr. Comstock has been a lecturer at the University of Houston’s C.T. Bauer School of Business since January 2007. He teaches
courses in Business Ethics, Advanced Internal Audit, and Governance Risk and Compliance. He also served on Microsoft’s Business
Intelligence Advisory Council in 2001 and 2002 and is an alumnus instructor of The Data Warehousing Institute.
Mr. Comstock was previously president of a professional services firm, director of a Finance and Accounting practice, and a principal
providing technology and management consulting services to Fortune 1000 companies.
PROFESSIONAL AFFILIATIONS
• ISACA Houston Chapter - President
• Information Systems Security Association –
Audit Committee chair
• Institute of Internal Auditors - Houston Chapter
Vice president, Technology
• Association of Certified Fraud Examiners
Peggy Daley
Managing Director
312.429.7950 | pdaley@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Peggy Daley has over 25 years of experience in investigations, data analytics, dispute resolution, and regulatory compliance for
multinational corporations in a variety of industries. She has conducted fraud, money laundering, and trade theft investigations on behalf
of boards of directors and outside counsel, typically under circumstances requiring disclosure to relevant regulatory and law enforcement
authorities. In addition to conducting high-profile fraud and due diligence investigations, she also advises clients in designing and
implementing compliance programs and procedures.
In 2009, Ms. Daley led the forensic technology team that supported Anthony Valukas, the examiner in the Lehman Brothers’ bankruptcy.
In 2010, she testified as a fraud expert in an accounting malpractice action brought against a top national accounting firm by the trustee
of a bankrupt former client of the firm. Damages claimed by the trustee in bankruptcy for the former audit client exceeded $100 million. In
2011, she led the investigation into alleged false reporting of LSAT and GPA data by the University of Illinois School of Law. She also led
a hacking investigation for the university. In 2012, in connection with a preliminary injunction order in a trade secret case, she was
responsible for leading a team that undertook a forensic collection, review, and remediation of the client’s entire computer network,
including hundreds of servers and thousands of laptops, tablets, and cell phones located across United States.
Before joining BRG, Ms. Daley was a corporate defense attorney at prominent national law firms. She also served as general counsel at
a global security and litigation consulting firm.
Ms. Daley is a Certified Anti-Money Laundering Specialist (CAMS), a Certified Information Privacy Professional (CIPP), and a Certified
Fraud Examiner (CFE). She is a member of the Illinois Bar and a Class A private detective in Illinois. She was a member of the ABA
2013 Task Force on Corporate Monitors and the AICPA 2010–2012 Task Force on Forensic Technology.
PROFESSIONAL AFFILIATIONS
• American Bar Association, Criminal Justice Section, White
Collar Committee -Subcommittee Chair of Financial
Institutions, Anti-Money Laundering and Patriot Act; liaison to
American Banking Association
• Association of Certified Fraud Examiners
• International Association of Privacy Professionals
• Association of Certified Anti-Money Laundering Professionals
Robert DeCicco
Managing Director
858.925.8340 | rdecicco@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Robert DeCicco is a Managing Director in BRG’s Technology Advisory Practice and is based in California. He specializes in providing
services related to data acquisition and forensic examinations for a variety of high-profile and confidential clients. His responsibilities span from
hands-on examination and analysis of computer data to the day to day management of the forensics staff and the enforcement of policies and
procedures. DeCicco has actively managed and participated in the collection and the subsequent analysis and processing of electronic
evidence from extremely complex, disparate and sensitive technology environments throughout the world.
DeCicco regularly works in conjunction with regulatory and law enforcement agencies to provide acceptable practices and forensically sound
data and analysis protocols. He also maintains active involvement in the standards operating procedure committee within Navigant related to
acceptable methodologies related to ESI collection and analysis in the field and in the lab.
DeCicco is a court accepted expert in the fields of digital forensics, data analytics, electronic discovery & processing, computer programming,
data security and electronic evidence verification. He has provided expert reports, rebuttals and defended his opinions related to computer
forensics and electronic discovery in both civil and criminal matters and in state, district and federal courts throughout the country.
DeCicco regularly lectures to the legal community and Computer Forensics communities on topics related to electronic discovery, cyber
security and computer forensics.
EDUCATION
• B.S. in Management/Management Information Systems, Pennsylvania State University
• Incident Response Forensic Analysis & Discovery, Guidance Software Professional Training Center
• Cyber Security Incident Response, Malware Detection & Removal, Memory Forensics and Remediation – Mandiant Security Consultancy
PROFESSIONAL AFFILIATIONS
• Association of Certified Fraud Examiners
• High Tech Crime Investigation Association
Amit Garg
Director
202.747.3483 | agarg@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Amit Garg brings over 15 years of IT consulting, sales, business development, strong communication, and leadership experience with a
focus on delivering high value to his clients. His clients have included large federal civilian agencies, military organizations, and Fortune
500 clients in the banking, insurance, and financial services, healthcare, life sciences, consumer products, and retail verticals.
Amit’s areas of expertise includes enterprise security program management, enterprise governance, risk management, and compliance
(eGRC), data protection, business resiliency, security culture awareness and training, project management, and cybersecurity due
diligence for mergers, acquisitions (M&A) and divestitures. He has extensive experience and is familiar with various regulatory
requirements including FISMA, HIPAA, NIST, and is knowledgeable of industry best practices across multiple verticals. Amit holds an
M.S. in Information Security Management from the George Washington University and a BA in Economics from Emory University.
CLIENT EXPERIENCE
Some of Amit’s notable engagements include the following:
• Served as the Information Assurance Officer and provided advisory services for two of the world’s largest clinical IT electronic medical
health records deployed at over 100 sites worldwide for the US Dept. of Defense Military Health System.
• Developed an IT Security Due Diligence Framework for assessing risk for potential acquisition targets for a Fortune 100 retail
organization.
• Advised the Office of the CIO and key business functions of a Fortune 500 retail organization on data segregation strategies and
delivered multiple workshops to senior executives.
• Led the assessment and selection process of a GRC vendor for an enterprise risk management solution for a Fortune 500 bank.
PROFESSIONAL AFFILIATIONS
• Certified Member #93209, International Information Systems Security Certification Consortium (ISC2)
• Certified Member #522857, Project Management Institute (PMI)
• Certified Member #7853, Business Continuity Institute (BCI)
• Member, International Association of Privacy Professionals (IAPP)
• Member, Information Systems Security Association – Northern VA Chapter
Dr. Lance Hayden
Managing Director
512 .438.9064| lhayden@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Lance Hayden has worked in information security for 25 years, beginning his career as a human intelligence (HUMINT) operations
officer with the Central Intelligence Agency. He has acted as a trusted security advisor to government, military, and enterprise customers
across industries including banking and finance, insurance, healthcare, retail, energy, and internet service providers.
Mr. Hayden previously developed and managed a boutique IT governance, risk, and compliance (IT GRC) consulting practice inside a
global networking and technology company. This team provided high-value service engagements focused on information security
strategy and culture, risk management and assessment, security evaluation and metrics, and compliance support. Mr. Hayden has
extensive experience with international standards including the ISO 27000 information security family and with industry frameworks and
regulations including PCI DSS, HIPAA, FISMA, COBIT, and CMMI. He holds CISSP, CISM, CRISC, and ISO 27001 Lead Auditor
professional certifications.
Mr. Hayden’s research specialties are in the areas of information security culture, security metrics, privacy, and surveillance. A regular
speaker and contributor in information security industry conferences and publications, Mr. Hayden is also the author of IT Security
Metrics: A Practical Framework for Measuring Security and Protecting Data and the forthcoming People-Centric Security: Transforming
Your Enterprise Security Culture, both from McGraw-Hill. He is an adjunct faculty member of the University of Texas School of
Information and a member of the iSchool Advisory Board.
EDUCATION
University of Texas
Ph.D., Information Science, 2009
MLIS, Information Science, 1997
University of New Mexico
B.A., English, 1991
PROFESSIONAL AFFILIATIONS
(ISC)2, Member
ISACA, Member
ISSA, Member
Robert Hichens
Managing Director
713.493.2554 | rhichens@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Robert Hichens has more than 29 years of experience in corporate IT and consulting, with a focus on the strategic and tactical utilization
of technology. His extensive experience crosses industries including energy, pharmaceutical, aerospace, consumer products, and
financial services. His consulting expertise covers areas of litigation technology solutions, electronic discovery, and business process
analysis and design. His background brings together the disciplines of technology, business, and law, allowing Mr. Hichens to deliver a
range of discovery and information management consulting services.
Mr. Hichens previously worked at two large consulting firms. His experience also includes roles as an IT partner and director for
Mortgage Operations and Compliance at a real estate investment trust, global IT director for Design and Development Systems at a
major manufacturing company; and senior manager in Arthur Andersen’s Legal Technology practice. He held a variety of technology
positions at a leading global security company, including director for Corporate Litigation Support Systems.
Mr. Hichens focuses on developing strong business relationships and streamlining business processes for corporations, utilizing
technology to yield efficiencies to existing operations, and reducing costs. Representative examples of his engagement experience
include:
Developed a company-wide records retention schedule and information disposal program for email, physical and electronic records for a
large cruise line.
Performed over 20 IBM/PSS Atlas LCC, Exterro Fusion, and Zapproved Legal Hold Pro implementations for Fortune 1000 companies
across a variety of industries, including oil and gas, healthcare, utilities, financial services, legal, and high technology. Defined new
business processes, roles and responsibilities, reporting, training, and change management materials.
PROFESSIONAL AFFILIATIONS
• Association of Records Managers and Administrators
• Compliance, Governance and Oversight Council
• Preservation Excellence (PREX) Member
David Jimenez
Senior Managing Consultant | Houston
713.493.2553 | djimenez@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
David Jimenez is a Senior Managing Consultant with Berkeley Research Group. Prior to joining BRG, he was a Manager with Huron
Consulting Group. He has over 12 years of experience and expertise advising both corporate and law firm clients on information
technology issues. He specializes in performing legally defensible electronic collections and conducting digital forensic investigations, e-
discovery project management and incident response.
CLIENT EXPERIENCE
Mr. Jimenez has utilized his technical skills to collect and analyze data from a broad spectrum of sources including geolocation and
seismic equipment, physical access control systems, medical devices, mainframes, and air quality monitoring instruments.
Mr. Jimenez has performed hundreds of computer forensic investigations, performed onsite analysis of cyber security breaches, and has
assisted legal counsel with the preservation and management of large volumes of data in response to civil litigation, government
inquiries and internal investigations.
PROFESSIONAL AFFILIATIONS
• EnCase Certified Examiner (EnCE)
• Cisco Certified Network Associate (CCNA)
Robert G. Kurtz
Managing Director
646.862.0978 | rkurtz@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Bob leads the Technology Advisory Practice (TAP) and as such focuses on IT Strategy, Program Management and Information Governance and Security
Management across all of BRG’s industry sectors. Before joining BRG, Bob was a founder of a boutique consulting firm and selected by his peers as their
president. Prior, he was Vice President of Information Technology at Time Warner where he oversaw a 150 person IT Department and he was also Executive
Director of Corporate Technology at The New York Times. Bob also was a Practice Leader at KPMG and Deloitte’s Media and Digital Asset Management teams.
Bob is a renowned subject matter expert in Global Enterprise Requirements Planning (ERP) systems and digital content management. His areas of expertise include
Program Management, Organizational Change Management, Process Improvement, Business and IT Strategy/Transformation, Customer Relationship Management,,
Financial Management, Supply Chain Management, Outsourcing/Shared Service Center creation, Governance, Risk and Compliance.
He has advised clients in the areas of new product development, service offerings and key hiring decisions and is frequently called upon by clients to provide advice
on financial related technology matters including feasibility studies, software requirements and selection and ROI analysis
Bob has served as PMO Director for Dun & Bradstreet’s (D&B’s) Governance, Risk and Compliance Group overseeing the implementation of a multi-million dollar
Foreign Corrupt Practices Act (FCPA) compliance enterprise application now being used globally by such companies as Walmart, Microsoft, Bechtel and others.
Bob was also brought back into D&B to manage the implementation of a Foreign Account Tax Compliance Act (FATCA) solution for the banking industry. He has
been the project executive who led the building of a new call center for the largest gas utility company in West Virginia. Governor, Joe Manchin, now Senator
Manchin, presided over the ribbon cutting ceremony. As Program Manager, Bob led the global implementation of Microsoft Dynamics SL™ at a Texas-based
energy plant maintenance corporation saving the company millions per year and providing them with product costing information they never had before that allowed
for better product pricing and margin building. He was the Executive Project manager for the SAP ™ implementation at AIG’s Global Investment Group. We were
honored to have been selected several times to provide consulting services to Educational Testing Service (ETS). Bob assisted ETS in the implementation of several
new PeopleSoft ® modules , website redesign, outsourcing activities and general ledger chart of account redesign.
EDUCATION
New York University Stern School of Business – MBA in Computer Application and Information Systems
New York University Stern School of Business – BS in Quantitative Analysis and Management
PROFESSIONAL AFFILIATIONS
Earned a CPA, CISA, CSP, CIA, CDP. Post Graduate Certificate in Accounting from NYU, a member of the AICPA and the NY State Society of CPA’s, a past
president of Information Systems Audit and Control Association NY Chapter, Past Chairman of the ISSCA International Conference at the Waldorf=Astoria in New
York Have written articles and received awards from the Financial Executives Institute, the International Newspapers Financial Executive and Information System
Audit and Control Association.
Richard Peters
Director
713.493.2545 | rpeters@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Richard Peters brings over 14 years of experience managing, performing, and delivering information technology security solutions. This
experience includes technology risk management, IT auditing, IT security assessments, internal auditing, attack-and-penetration testing
services, and security analysis in domestic and global entities in the energy, technology, financial, and manufacturing industries.
Mr. Peters is skilled in designing, assessing, and testing against multiple security standards and frameworks, including ISO
27001/27002, Payment Card Industry Data Security Standard (PCI DSS), COBIT, and the National Institute of Standards and
Technology (NIST). He has been a professor at the University of Houston teaching information security. He is a frequent speaker and
leader at major security conventions around the country.
Mr. Peters has considerable experience within the information security and auditing/assessment niche. He has knowledge and
background in client/server environments, mainframes, and databases, as well as application and hardware experience. He has
provided PCI-related services for over six years, including PCI DSS assessments, PA DSS assessments, and ASV services. Mr. Peters
also has experience communicating with and between executive leadership and technical teams regarding understanding of risk.
EDUCATION
University of Texas at Austin
BBA, Finance, 1996
David Phillips
Managing Director
512.431.6219 | dphillips@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
David Phillips brings more than 25 years of information technology experience and has advised U.S. military, Fortune 100 clients, and
foreign governments on information security risk programs, IT network security architecture, and regulatory compliance.
Mr. Phillips developed a growing professional service business inside a multinational networking corporation focused on cybersecurity,
protecting clients’ intellectual property and customer data, and securing networks to allow for resilient IT infrastructure in the face of
cyber-attacks. His clients have included multibillion-dollar businesses in the retail, finance, manufacturing, oil and gas, and healthcare
verticals. He has worked with global enterprises to measure and mature their security capabilities across people, process, and
technology across levels from technology management to security awareness and security cultural transformation. David has experience
building global consulting teams with capabilities in all major business markets; UK, EU, India, Japan, Middle East, ANZ, Latin America,
and Brazil.
David has extensive experience in IT governance, risk, and compliance (IT-GRC); IT security program development; IT security metrics;
international standards such as ISO 27001, ISO 27005, and ISO 31000; and industry frameworks including HIPAA, PCI, NERC, and
NIST guidelines.
CLIENT EXPERIENCE
David brings extensive success and consulting experience in providing effective information security programs in areas including:
• Security Culture Assessments
• Security Metrics Program Development
• Unified Information Security Controls Frameworks
• Medical Device Risk Assessment Methodology
• Penetration and Vulnerability Management
PROFESSIONAL AFFILIATIONS
International Information Systems Security Certification Consortium (ISC)², Information Systems Security Association (ISSA), InfraGard
(FBI Critical Infrastructure Partnership), Cybersecurity Benchmarking Association (CYSBA)
William Poirier, EnCE
Consultant | Chicago
312.429.7951 | wpoirier@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
William Poirier is a member of BRG’s Technical Advisory Practice and specializes in conducting computer forensic and due diligence
investigations. His work involves all stages of discovery, including data mapping, collection/preservation, analysis, hosting, review, and
document production. He has conducted forensic investigations involving embezzlement, trade secret and intellectual property theft,
data breaches, health care compliance, and fraud.
William is also a skilled researcher and part of BRG’s Global Investigations + Strategic Intelligence practice. William mines public
records and electronic database resources to perform comprehensive and revealing due diligence background investigations of
companies and individuals. Subjects have included hedge fund managers, broker-dealers, expert witnesses, international gaming
operations, real estate developers, high-frequency trading firms, and academic administrators.
CLIENT EXPERIENCE
• Led a document review team for a data set of over 20 million documents as part of a red flag analysis on behalf of Irving Picard, the
Trustee of Bernie L Madoff Investment Securities, LLC.
• Performed a forensic collection, review, and remediation of the entire computer network of a leading life sciences company in
accordance with a preliminary injunction order barring the defendant from selling its products until all of the plaintiff's trade secrets
were eradicated. Over 138 TB of data was collected from approximately 500 sources in only three weeks’ time.
• Was the lead collection specialist on behalf of a governmental agency involved in litigation over a failed IT implementation. Personally
collected forensic images from hundreds of sources including personal computers, USB drives, smart-phones, servers, DVDs,
printer/copiers, and floppy discs. Administered the review platform which hosted the case’s largest dataset.
PROFESSIONAL AFFILIATIONS
• EnCase Certified Examiner (EnCE)
• Associate Board, Legal Aid Society
• PERC, Illinois Department of Financial and Professional Regulation
Antonio Rega
Director
646.651.4734 | arega@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Antonio Rega, EnCE, CCE, CFE, is a regional leader within BRG's Global Investigations and Strategic Intelligence practice and
specializes in technology and eDiscovery services.
On behalf of global corporations and law firms, Mr. Rega has been engaged as project lead on matters relating to intellectual
property/trade secret theft, information governance, data privacy/security, internal audits, investigations, fraud cases, and mergers and
acquisitions. He has submitted both affidavits and expert reports detailing his work as a consulting and analysis expert on complex
forensic matters and has provided sworn testimony on matters relating to computer forensics and eDiscovery.
Mr. Rega’s recent engagements of note include acting as originator and team lead on behalf of counsel for a class action lawsuit of a
national healthcare provider, preparing matter-specific and advanced methodologies for patient record/electronically stored information
(ESI) preservations across geographical locations in tandem for subsequent forensic analysis and hosted review by counsel; acting as
team lead on a data breach investigation, culminating in a report to the FBI identifying transferred IP via analysis of server log and Web
browsing history; and acting as primary lead on a high-profile SEC investigation into the finances of a publicly traded oil and gas
company CEO, where Mr. Rega led an on-site team in conducting custodial and IT interviews, as well as ESI preservations, in addition
to drafting and finalizing a formal memo summary presented to counsel and vetted by external auditors. He also acted as originator and
lead on a large-scale and sensitive investigation into alleged money laundering and suspicious activity on behalf of a law firm’s client, an
international Asian bank. This matter included data preservations within state data-privacy provisions, forensic analysis, and expert
reporting, as well as hosting a long-term processing and review platform within the client’s facility in Asia in compliance with data-privacy
restrictions.
PROFESSIONAL AFFILIATIONS
• Association of Records Managers and Administrators (ARMA)
• Association of Certified Fraud Examiners (ACFE)
• International Society of Forensic Computer Examiners
(ISFCE)
Ron Schnell
Director | Washington, DC
202.909.2793| rschnell@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Ron Schnell is an accomplished executive with a history of running large technology organizations, from early stage startups to large
divisions of S&P 500 corporations. He has recently specialized in auditing and enforcing Microsoft's compliance with the consent decree
in United States v. Microsoft Corporation.
Mr. Schnell ran the day-to-day operations of the Technical Committee, a private corporation ordered to be formed by the U.S. Courts for
the sole purpose of monitoring Microsoft for its compliance with the antitrust Final Judgments of 2002. The organization and its success
were publicly praised by the U.S. Attorney General, attorneys general for several states, and the federal court judge presiding over the
largest antitrust case in U.S. history.
CLIENT EXPERIENCE
Mr. Schnell has also served as an expert witness on several high-profile cases in the areas of intellectual property, software licensing,
cybersecurity, and other highly technical matters. He has knowledge of over 40 computer languages. He is currently an adjunct
professor at Nova Southeastern University.
Teresa P. Schoch
Associate Director | Washington, DC
202.909.2787 | tschoch@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Teresa P. Schoch is a nationally recognized expert in information retrieval software, global research, global privacy, records and
document management, and information governance. Her diverse experience includes the practice of law, management of a
successfully sold software company, adjunct professorships, law-firm information management, eDiscovery management, and team
building within corporations and law firms (30+ employees). She has also provided records management consulting to law firms and
corporations, marketing and sales management, privacy management, law library management, property management, and disaster
recovery management for the federal government (top-secret clearance). She has published frequently in her areas of expertise and for
online and database magazines, and she is a decision maker and writer for the Michigan State Bar Ethics Committee.
CURRENT CERTIFICATIONS
• Certified Records Manager, The Institute of Certified Records Managers
• Information Governance Professional, American Records Management Association
• Electronic Records Management Masters, Association for Information and Image Management
• Certified Change Manager, ProSci
• Certified Informational Professional, AIIM
• Certified Information Privacy Professional, International Association of Privacy Professionals
• Certified Law Librarian, American Association of Law Libraries
PROFESSIONAL AFFILIATIONS
• ICRM (The Institute of Certified Records Management)
• AIIM (Association for Information and Image Management)
• ARMA (American Records Management Association)
• IAPP (International Association of Privacy Professionals)
• Licensed attorney Michigan and Florida (inactive)
Joe Sremack
Director
202.909.2786 | jsremack@thinkbrg.com
PROFESSIONAL HIGHLIGHTS
Joe Sremack has over a decade of information technology and consulting experience. He develops and implements solutions to advise
corporate and legal clients in matters involving complex technology issues. Mr. Sremack’s expertise is in IT assessments, electronic
discovery, and complex data analytics involving transactional and disparate data.
A computer scientist by training, Mr. Sremack has conducted numerous matters involving system investigations, data analysis, and the
evaluation of technology solutions. He has advised clients across the United States and internationally in matters such as class-action
settlement distribution, intellectual property theft, bankruptcy, financial fraud, healthcare regulatory investigations, and antitrust disputes.
He has worked with clients in industries including telecommunications, finance, healthcare, energy, government, retail, and insurance.
He is a frequent publisher and speaker on issues related to electronic discovery and transactional data.
EDUCATION
North Carolina State University
M.S., Computer Science
College of Wooster
B.A., Computer Science and Philosophy
PROFESSIONAL AFFILIATIONS
• IEEE Information Theory Society Member
• American Bar Association
• Sedona Conference Working Groups 1 and 11
• ARMA International

More Related Content

What's hot

Data Breach Brochure
Data Breach BrochureData Breach Brochure
Data Breach Brochuretonycord01
 
Privacy and Data Security: Risk Management and Avoidance
Privacy and Data Security: Risk Management and AvoidancePrivacy and Data Security: Risk Management and Avoidance
Privacy and Data Security: Risk Management and AvoidanceAmy Purcell
 
4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...
4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...
4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...SafeNet
 
Cybersecurity: How To Protect Your Law Firm Data
Cybersecurity: How To Protect Your Law Firm DataCybersecurity: How To Protect Your Law Firm Data
Cybersecurity: How To Protect Your Law Firm DataRocket Matter, LLC
 
Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)
Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)
Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)Financial Poise
 
Cybersecurity Brief: Understanding Risk, Legal Framework, & Insurance
Cybersecurity Brief: Understanding Risk, Legal Framework, & InsuranceCybersecurity Brief: Understanding Risk, Legal Framework, & Insurance
Cybersecurity Brief: Understanding Risk, Legal Framework, & InsuranceSecureDocs
 
Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...
Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...
Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...Rob Robinson
 
ZyLAB White Paper - Bringing e-Discovery In-house
ZyLAB White Paper - Bringing e-Discovery In-houseZyLAB White Paper - Bringing e-Discovery In-house
ZyLAB White Paper - Bringing e-Discovery In-houseZyLAB
 
BDO Forensic Services
BDO Forensic ServicesBDO Forensic Services
BDO Forensic ServicesBDO Indonesia
 
Preservation and Proportionality: Lowering the Burden of Preserving Data in C...
Preservation and Proportionality: Lowering the Burden of Preserving Data in C...Preservation and Proportionality: Lowering the Burden of Preserving Data in C...
Preservation and Proportionality: Lowering the Burden of Preserving Data in C...Zapproved
 
Data protection regulation
Data protection regulationData protection regulation
Data protection regulationGreg Ezeilo
 
Forensic Data Analysis Services
Forensic Data Analysis ServicesForensic Data Analysis Services
Forensic Data Analysis ServicesBDO Indonesia
 
CMW Cyber Liability Presentation
CMW Cyber Liability PresentationCMW Cyber Liability Presentation
CMW Cyber Liability PresentationSean Graham
 
Defining a Legal Strategy ... The Value in Early Case Assessment: PowerPoint
Defining a Legal Strategy ... The Value in Early Case Assessment: PowerPointDefining a Legal Strategy ... The Value in Early Case Assessment: PowerPoint
Defining a Legal Strategy ... The Value in Early Case Assessment: PowerPointAubrey Owens
 
Legal Considerations of Digital Document Storage and E-Signature, Authority f...
Legal Considerations of Digital Document Storage and E-Signature, Authority f...Legal Considerations of Digital Document Storage and E-Signature, Authority f...
Legal Considerations of Digital Document Storage and E-Signature, Authority f...ImageSoft
 
charles drakes resume private sector 07-26-2016
charles drakes resume private sector 07-26-2016charles drakes resume private sector 07-26-2016
charles drakes resume private sector 07-26-2016Charles Drakes
 

What's hot (19)

Data Breach Brochure
Data Breach BrochureData Breach Brochure
Data Breach Brochure
 
Privacy and Data Security: Risk Management and Avoidance
Privacy and Data Security: Risk Management and AvoidancePrivacy and Data Security: Risk Management and Avoidance
Privacy and Data Security: Risk Management and Avoidance
 
4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...
4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...
4 Steps to Financial Data Security Compliance Technologies to Help Your Finan...
 
Cybersecurity: How To Protect Your Law Firm Data
Cybersecurity: How To Protect Your Law Firm DataCybersecurity: How To Protect Your Law Firm Data
Cybersecurity: How To Protect Your Law Firm Data
 
Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)
Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)
Best Practices Regarding Technology (Series: Legal Ethics - Best Practices)
 
Cybersecurity Brief: Understanding Risk, Legal Framework, & Insurance
Cybersecurity Brief: Understanding Risk, Legal Framework, & InsuranceCybersecurity Brief: Understanding Risk, Legal Framework, & Insurance
Cybersecurity Brief: Understanding Risk, Legal Framework, & Insurance
 
Final Project
Final ProjectFinal Project
Final Project
 
Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...
Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...
Best Practices: Complex Discovery in Corporations and Law Firms | Ryan Baker ...
 
ZyLAB White Paper - Bringing e-Discovery In-house
ZyLAB White Paper - Bringing e-Discovery In-houseZyLAB White Paper - Bringing e-Discovery In-house
ZyLAB White Paper - Bringing e-Discovery In-house
 
BDO Forensic Services
BDO Forensic ServicesBDO Forensic Services
BDO Forensic Services
 
Preservation and Proportionality: Lowering the Burden of Preserving Data in C...
Preservation and Proportionality: Lowering the Burden of Preserving Data in C...Preservation and Proportionality: Lowering the Burden of Preserving Data in C...
Preservation and Proportionality: Lowering the Burden of Preserving Data in C...
 
Data protection regulation
Data protection regulationData protection regulation
Data protection regulation
 
Forensic Data Analysis Services
Forensic Data Analysis ServicesForensic Data Analysis Services
Forensic Data Analysis Services
 
CMW Cyber Liability Presentation
CMW Cyber Liability PresentationCMW Cyber Liability Presentation
CMW Cyber Liability Presentation
 
Defining a Legal Strategy ... The Value in Early Case Assessment: PowerPoint
Defining a Legal Strategy ... The Value in Early Case Assessment: PowerPointDefining a Legal Strategy ... The Value in Early Case Assessment: PowerPoint
Defining a Legal Strategy ... The Value in Early Case Assessment: PowerPoint
 
Bridger Insight brochure
Bridger Insight brochureBridger Insight brochure
Bridger Insight brochure
 
Legal Considerations of Digital Document Storage and E-Signature, Authority f...
Legal Considerations of Digital Document Storage and E-Signature, Authority f...Legal Considerations of Digital Document Storage and E-Signature, Authority f...
Legal Considerations of Digital Document Storage and E-Signature, Authority f...
 
charles drakes resume private sector 07-26-2016
charles drakes resume private sector 07-26-2016charles drakes resume private sector 07-26-2016
charles drakes resume private sector 07-26-2016
 
Is it time for an IT Assessment?
Is it time for an IT Assessment?Is it time for an IT Assessment?
Is it time for an IT Assessment?
 

Similar to Forensic Technology Team Overview

Forensic Technology Services-BDO USA, LLP
Forensic Technology Services-BDO USA, LLPForensic Technology Services-BDO USA, LLP
Forensic Technology Services-BDO USA, LLPMonica Klunk
 
The Legal Case for Cybersecurity
The Legal Case for CybersecurityThe Legal Case for Cybersecurity
The Legal Case for CybersecurityShawn Tuma
 
GDPR solutions (JS Event 28/2/18) | Greenlight Computers
GDPR solutions (JS Event 28/2/18) | Greenlight Computers GDPR solutions (JS Event 28/2/18) | Greenlight Computers
GDPR solutions (JS Event 28/2/18) | Greenlight Computers Gary Dodson
 
3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence
3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence
3rd Party Risk: Practical Considerations for Privacy & Security Due DiligenceResilient Systems
 
The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)Shawn Tuma
 
Aceds 2015 wie nycpa final oct panel slides
Aceds 2015 wie nycpa   final oct panel slidesAceds 2015 wie nycpa   final oct panel slides
Aceds 2015 wie nycpa final oct panel slidesJoe Bartolo
 
A brief Intro to Digital Forensics
A brief Intro to Digital ForensicsA brief Intro to Digital Forensics
A brief Intro to Digital ForensicsManik Bhola
 
ey-forensics-discovery-services.pdf
ey-forensics-discovery-services.pdfey-forensics-discovery-services.pdf
ey-forensics-discovery-services.pdfaparnamore11
 
Theres No Crying In Baseball...Or In E Discovery 04.30.10
Theres No Crying In Baseball...Or In E Discovery 04.30.10Theres No Crying In Baseball...Or In E Discovery 04.30.10
Theres No Crying In Baseball...Or In E Discovery 04.30.10knugent
 
2 7-2013-big data and e-discovery
2 7-2013-big data and e-discovery2 7-2013-big data and e-discovery
2 7-2013-big data and e-discoveryExterro
 
Information Security vs IT - Key Roles & Responsibilities
Information Security vs IT - Key Roles & ResponsibilitiesInformation Security vs IT - Key Roles & Responsibilities
Information Security vs IT - Key Roles & ResponsibilitiesKroll
 
Ttss consulting(1)
Ttss consulting(1)Ttss consulting(1)
Ttss consulting(1)Steven Trom
 
Andy Hepburn Value Proposition
Andy Hepburn Value PropositionAndy Hepburn Value Proposition
Andy Hepburn Value Propositionhandyjr
 
The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)Shawn Tuma
 
Capture Discovery
Capture DiscoveryCapture Discovery
Capture Discoverywlucina
 
Why Your Organization Must Have a Cyber Risk Management Program and How to De...
Why Your Organization Must Have a Cyber Risk Management Program and How to De...Why Your Organization Must Have a Cyber Risk Management Program and How to De...
Why Your Organization Must Have a Cyber Risk Management Program and How to De...Shawn Tuma
 
Baretzky & Associates Presentation.
Baretzky & Associates Presentation.Baretzky & Associates Presentation.
Baretzky & Associates Presentation.Ricardo Bn. Baretzky
 
Vuzion Love Cloud GDPR Event
Vuzion Love Cloud GDPR Event Vuzion Love Cloud GDPR Event
Vuzion Love Cloud GDPR Event Vuzion
 

Similar to Forensic Technology Team Overview (20)

Forensic Technology Services-BDO USA, LLP
Forensic Technology Services-BDO USA, LLPForensic Technology Services-BDO USA, LLP
Forensic Technology Services-BDO USA, LLP
 
The Legal Case for Cybersecurity
The Legal Case for CybersecurityThe Legal Case for Cybersecurity
The Legal Case for Cybersecurity
 
GDPR solutions (JS Event 28/2/18) | Greenlight Computers
GDPR solutions (JS Event 28/2/18) | Greenlight Computers GDPR solutions (JS Event 28/2/18) | Greenlight Computers
GDPR solutions (JS Event 28/2/18) | Greenlight Computers
 
Co3 rsc r5
Co3 rsc r5Co3 rsc r5
Co3 rsc r5
 
SNW Fall 2009
SNW Fall 2009SNW Fall 2009
SNW Fall 2009
 
3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence
3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence
3rd Party Risk: Practical Considerations for Privacy & Security Due Diligence
 
The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Dallas 2017 (Lunch Keynote)
 
Aceds 2015 wie nycpa final oct panel slides
Aceds 2015 wie nycpa   final oct panel slidesAceds 2015 wie nycpa   final oct panel slides
Aceds 2015 wie nycpa final oct panel slides
 
A brief Intro to Digital Forensics
A brief Intro to Digital ForensicsA brief Intro to Digital Forensics
A brief Intro to Digital Forensics
 
ey-forensics-discovery-services.pdf
ey-forensics-discovery-services.pdfey-forensics-discovery-services.pdf
ey-forensics-discovery-services.pdf
 
Theres No Crying In Baseball...Or In E Discovery 04.30.10
Theres No Crying In Baseball...Or In E Discovery 04.30.10Theres No Crying In Baseball...Or In E Discovery 04.30.10
Theres No Crying In Baseball...Or In E Discovery 04.30.10
 
2 7-2013-big data and e-discovery
2 7-2013-big data and e-discovery2 7-2013-big data and e-discovery
2 7-2013-big data and e-discovery
 
Information Security vs IT - Key Roles & Responsibilities
Information Security vs IT - Key Roles & ResponsibilitiesInformation Security vs IT - Key Roles & Responsibilities
Information Security vs IT - Key Roles & Responsibilities
 
Ttss consulting(1)
Ttss consulting(1)Ttss consulting(1)
Ttss consulting(1)
 
Andy Hepburn Value Proposition
Andy Hepburn Value PropositionAndy Hepburn Value Proposition
Andy Hepburn Value Proposition
 
The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)
The Legal Case for Cybersecurity - SecureWorld Denver 2017 (Lunch Keynote)
 
Capture Discovery
Capture DiscoveryCapture Discovery
Capture Discovery
 
Why Your Organization Must Have a Cyber Risk Management Program and How to De...
Why Your Organization Must Have a Cyber Risk Management Program and How to De...Why Your Organization Must Have a Cyber Risk Management Program and How to De...
Why Your Organization Must Have a Cyber Risk Management Program and How to De...
 
Baretzky & Associates Presentation.
Baretzky & Associates Presentation.Baretzky & Associates Presentation.
Baretzky & Associates Presentation.
 
Vuzion Love Cloud GDPR Event
Vuzion Love Cloud GDPR Event Vuzion Love Cloud GDPR Event
Vuzion Love Cloud GDPR Event
 

Forensic Technology Team Overview

  • 2. OVERVIEW 2  Global strategic advisory and expert consulting firm that provides independent advice, investigations, data analytics, authoritative studies, expert testimony, and regulatory and dispute consulting  Headquartered in Emeryville, California, with offices in the United States, Australia, Canada, Latin America, and the United Kingdom  Expertise spans economics and finance, digital and cyber forensics, data analytics, investigations, and public policy in BRG employs over 700 professionals in 25 offices many of the major sectors of the economy, including banking, healthcare, information technology, energy, construction, and real estate  More than 300 BRG experts supported by more than 400 highly trained and well- credentialed staff
  • 4. BRG’s Technology Professionals 4  BRG’s Forensic Technology Team includes members from a variety of backgrounds, including forensic investigators, federal prosecutors, corporate litigators, information security experts, court appointed eDiscovery experts and thought leaders.  Certifications held by our team include the following: BRG Team Members Are Industry Leaders Certified Anti-Money Laundering Specialist Certified Computer Examiner Cisco Certified Network Associate Certified Data Processor Certified Electronic Discovery Specialist Certified Forensic Computer Examiner Certified Fraud Examiner Certified in Financial Forensics Certified Internal Auditor Certified Information Privacy Professional Certified Information Systems Auditor Certified Information Systems Security Professional Certified Information Technology Professional Certified Management Accountant Certified Public Accountant Certified Records Manager EnCase Certified Examiner Enterprise Risk Management Certified Professional Information Technology Infrastructure Library Microsoft Certified Solutions Expert OMG Certified Systems Modeling Professional Private Investigator
  • 5. Forensic Technology Services Digital Forensics & Investigations eDiscovery Structured Data Analytics Information Governance Cyber Security
  • 6. How we can help across the EDRM BRG’s team of data acquisition experts has extensive experience planning, executing and managing forensically-sound data collection and preservation of large and complex data sets; BRG likewise offers expertise in complex structured data analysis/reporting. Data Identification, Collection; Database Analytics Initial Evidence Assessment BRG’s team utilizes best-in-class software to process and extract evidence silos and report on data reliability and suspicious activities. Project Management Expert Testimony BRG provides end-to-end project management support, from legal hold issuance through data collection, processing, hosting, document review and production. BRG team members have testified as experts in federal and state courts, as well as alternative dispute resolution fora; we have also served as court- appointed neutral experts. Information Governance/ Management BRG’s team has extensive experience in defensible disposition and remediation, records retention, data privacy, social media & BYOD policies, eDiscovery readiness and litigation hold best practices. Processing, ECA, Hosted Review BRG provides defensible processing and deduplication of ESI and consults on search technology and methodology; managed Relativity service provider supplies BRG with secure hosted architecture and best-of-breed analytics along with technology assisted review (TAR) tools and support.
  • 8. Digital Forensics and Investigations • Computer and mobile forensics • Internal investigations • File server and cloud-based network capture/analysis • Corporate espionage and data breach investigations • Source code comparison • Independent oral testimony and written reports • Metadata analytics • IP/Trade secret theft analysis • Timeline analysis and reporting • Log analysis S E R V I C E S
  • 9. S E R V I C E S eDiscovery Consulting • Discovery program assessment • Legal hold and collection technology selection and implementation • Litigation project and case management • Discovery project management, hosting and analytics • Discovery guidelines and playbook • Expert and 30(b)(6) testimony • Court-appointed neutral (discovery dispute resolution) • Predictive coding and Technology Assisted Review (TAR)
  • 10. Cyber Security DESIGN • Enterprise security design • Security architecture • Security product evaluation • Security product selection IMPLEMENT • Perimeter defense • Network defense • Employee training • Software defense • Data Security ASSESS • Network, Application and Data Vulnerability Testing • Continuous monitoring • Penetration Testing MANAGE • Incident response • Data breach investigations • Vulnerability management ASSURE • Compliance • Assessment • Audit
  • 11. S E R V I C E S Information Governance • Data mapping and system overviews • Records retention policies and schedules • Defensible data disposition and destruction • Certified summary reporting • Data privacy and state secrets compliance consulting • Email management strategy and policies • BYOD, social media and exit interview policies • Implementation, training and change management • Cross-border data identification and transfer • Litigation and regulatory readiness/preparedness
  • 12. S E R V I C E S Structured Data Analytics • Database collections and mining • Analytics and reporting • Database production • Consolidation and standardization of disparate data sources • Text analytics and unstructured data analysis • Custom automation • Big data migration and analysis of structured data • Dashboarding • Data sampling and modeling • Structured data review, redaction and culling
  • 14. Michael R. Bandemer Managing Director 619.823.8867 | mbandemer@thinkbrg.com PROFESSIONAL HIGHLIGHTS Michael Bandemer is a Managing Director with Berkeley Research Group and leader of its Discovery and Technology Practice which specializes in e-discovery, digital forensics and investigations. Prior to joining Berkeley Research Group, Mr. Bandemer was a Managing Director with Huron Legal, an international advisory and business services firm, and previously the national practice leader of LECG’s Legal Technology and Analytics Consulting group (LTAC) which specialized in e-discovery, digital forensics and data analytics and provided strategic consulting, expert testimony and services to corporations and law firms across all phases of discovery. Mr. Bandemer advises both corporate and law firm clients and provides expert testimony regarding various information management and legal technology issues including internal discovery processes, procedures, best practices, evidence preservation and collection, computer forensics, electronic discovery, complex data analytics, and other information technology issues. Mr. Bandemer has qualified in court as an expert in e-discovery and computer forensics and provided testimony at deposition, arbitration and federal and state court. He has been selected as an independent e-discovery expert and has served as a 30(b)(6) corporate representative, special master and court appointed third-party neutral in various engagements. In these matters Mr. Bandemer has addressed discovery issues concerning records management, accessibility, burden, preservation, collection, spoliation, search and production. The diverse range of matters Mr. Bandemer has assisted with includes misappropriation of trade secrets, internal investigations, breach of contract, business interruption, employment disputes, fraud investigations, securities, and wage and hour class actions among others. He has experience in a broad spectrum of industries including high technology, financial services, construction, professional services, gaming, hospitality, entertainment, oil and gas, government, retail, auto, railroad, entrepreneurial business, manufacturing, and real estate. PROFESSIONAL AFFILIATIONS • American Institute of Certified Public Accountants • High Technology Crime Investigation Association • California State Society of Certified Public Accountants • The Sedona Conference Working Group: Electronic Document Retention and Production • Association of Certified Fraud Examiners • Association of Records Managers & Administrators • Institute of Management Accountants • Association for Information and Image Management
  • 15. Geoffrey “Geo” Brown Director | San Diego 619.717.0407 | gbrown@thinkbrg.com PROFESSIONAL HIGHLIGHTS Geoff has more than 15 years of experience in information technology and over 10 years of experience in digital forensic collection and analysis, data analytics investigations, and eDiscovery. Geoff has performed hundreds of computer forensic investigations, performed onsite analysis of cyber security breaches, and has assisted both corporate and law firm clients with the preservation and management of large volumes of data in response to civil litigation, government inquiries and internal investigations. He has significant experience leading highly sensitive and complex matters ranging from misappropriation of trade secrets, internal investigations, breach of contract, business interruption, employment disputes, fraud investigations, securities, and wage and hour class actions among others in a wide variety of industries. CLIENT EXPERIENCE Geoff brings extensive success and experience in providing cost effective, defensible analysis, and consulting in areas including: • Forensic preservation including computers, servers, smart phones • Forensic analysis on Windows and Apple operating systems • IP theft and employee investigations • Time-line analysis and reporting • Server log analysis • Incident Response computer forensics • Data Analysis • E-discovery processing, search-term analysis, and review consulting • Project management • Expert witness testimony PROFESSIONAL AFFILIATIONS • EnCase Certified Examiner (EnCE) • High Technology Crime Investigation Association • Cisco Certified Network Associate (CCNA) • Certified Computer Forensics Examiner (CCFE) • Microsoft Certified System Engineer (MCSE)
  • 16. Alexander Carte Managing Director +44.0.203.597.5160 | acarte@thinkbrg.com PROFESSIONAL HIGHLIGHTS Alexander Carte is a leader of BRG’s UK Forensic Technology practice. He has over a dozen years of experience in electronic disclosure/discovery, electronic evidence and IT systems, IT security, data modeling and analytics, information governance and computer forensics. He was previously a partner at and led the national Forensic Technology practice for a UK accountancy firm. Mr. Carte has advised global law firms, multinational corporations, government regulators and agencies, and private individuals in a range of matters in jurisdictions worldwide. These engagements have encompassed expert support on electronic evidence and electronic search, electronic disclosure and discovery process and proportionality, review and advisement on IT systems and security, and investigations on computer systems for internal and external requests. Mr. Carte has provided advice and reporting to company boards, government regulators and investigatory bodies, the UK High Court, foreign courts up to the Supreme Court, legislative boards of enquiry and company administrators and liquidators. His cases have covered business sectors including reinsurance, air transport, freight and shipping, financial services, pharmaceutical, manufacturing, information technology, construction and reinsurance. PROFESSIONAL AFFILIATIONS • British Computer Society Professional • Society of Expert Witnesses • Society for Computers and Law • ARMA International • Association of Certified Fraud Examiners
  • 17. Christopher H. Carter, JD Director | Houston 713.481.9438 | ccarter@thinkbrg.com PROFESSIONAL HIGHLIGHTS Chris Carter advises clients on information technology governance and maturity, portfolio/program/project management, and building and maintaining high-performance technical teams. Mr. Carter has split his career between internal IT and consulting, resulting in a balanced, pragmatic, real-world approach in addressing challenges clients face in IT governance structuring. With significant experience in the oil/gas and telecommunications industries, he has led major, transformational system implementations, built and rebuilt technology support functions, and implemented innovative governance structures to position IT as a competitive advantage. CLIENT EXPERIENCE Mr. Carter has advised companies in implementing various systems from ERPs (enterprise resource planning) to OSS (operational support systems), as well as data warehousing and data-mining solutions. In addition to his systems design and development expertise, he has led multiple maturity projects implementing Information Technology Infrastructure Library (ITIL) ideal processes. He also has Sarbanes- Oxley IT general controls (SOX ITGC) audit and compliance experience, and has advised organizations in adopting next- generation computing resources (cloud, virtualization, PaaS). Most recently, Mr. Carter has focused on mentoring high-performance teams, including developing non-traditional and soft skills in technical individuals. PROFESSIONAL AFFILIATIONS • Member, Association of Information Technology Professionals • Member, TechExecs • University of Kansans Alumni Association
  • 18. Fred J. Charlot Director | Houston 713.493.2538 | fcharlot@thinkbrg.com PROFESSIONAL HIGHLIGHTS Fred Charlot advises clients on security-based risk management, information assurance, and cybersecurity. Mr. Charlot has experience leading teams responsible for identifying, classifying, and analyzing security weaknesses, as well as discovering new solutions for and recommending proven technologies to defend against emerging security threats. He has provided strategic project planning, design, analysis, and integration services for information systems to government entities and commercial industries. CLIENT EXPERIENCE Mr. Charlot has led the development of corporate-level security roadmaps and implementation plans for large systems incorporating commercial and government off-the-shelf technology and in-house technology. He has 25 years of experience in the information technology field, building information assurance throughout the system life cycle, including planning, design, development, testing, deployment, and operations. He has knowledge and background in network infrastructure, virtualization, application development, client/server administration, and database management. Mr. Charlot uses Health Insurance Portability and Accountability Act (HIPAA) specifications, the National Institute of Standards and Technology’s 800 Series, the International Organization for Standardization and International Electro-technical Commission’s ISO/IEC 27K, PCI Data Security Standard (DSS), and COBIT to evaluate security programs and advise on appropriate controls to mitigate security risks. He has directed tactical and strategic activities for security operations centers, communication-security (COMSEC) management, incident response, compliance management, threat management, and customer infrastructure and data. PROFESSIONAL AFFILIATIONS • Certified Information Systems Security Professional, CISSP • Certified Information Systems Auditor, CISA • Certified Information Privacy Professional • Information Technology Infrastructure Library certified
  • 19. Adam I. Cohen Managing Director 646.651.4643 | acohen@thinkbrg.com PROFESSIONAL HIGHLIGHTS Adam Cohen is a Certified Information Systems Security Professional (CISSP) and former practicing attorney who for more than 20 years has advised clients on the intersection of technology and law. His practice spans cybersecurity, electronic discovery, and enterprise information management. In addition to being an experienced consultant and counselor, he is a prolific author and lecturer whose work has been cited in several landmark federal court opinions. He has served as a court-appointed neutral eDiscovery expert in the U.S. District Court, Southern District of New York and is an active member in professional organizations and educational institutions. Soon after graduating from Duke Law School, Mr. Cohen became a litigation partner with one of the largest law firms in the world. With his then partner, he coauthored Electronic Discovery: Law and Practice, a treatise cited in seminal federal court opinions such as Zubulake v. UBS Warburg, Lorraine v. Markel, and others (including a Circuit Court of Appeals opinion on data privacy). Mr. Cohen also represented some of the largest and best-known corporations in the world in complex litigation involving technology issues. In 2006, Mr. Cohen joined a global business advisory firm as a senior managing director, where he helped develop the firm’s eDiscovery and information management segment. In 2011, he joined a leading professional services organization as a principal (a non-CPA partner) in the Forensic Technology and Discovery Services sub-practice of the Fraud Investigations and Dispute Services group, where he broadened his practice to include cybersecurity. He obtained his CISSP certification in 2014. Mr. Cohen teaches courses designed to prepare the next generation of lawyers for the challenges technology poses to the legal process. He is an adjunct faculty member at Fordham University School of Law and has lectured and/or taught courses at several law schools, including Harvard University and Georgetown University. PROFESSIONAL AFFILIATIONS • New York State Bar Association Chair Emeritus, E-Discovery Committee • Georgetown Law Cyber Security and Advanced E-Discovery Institute Advisory Board • Defense Research Institute Data Security and Management Committee, Member • American Bar Association • Sedona Conference Working Groups 1 and 11
  • 20. Dean Christopher Senior Managing Consultant | Chicago 312.429.7952 | dchristopher@thinkbrg.com PROFESSIONAL HIGHLIGHTS Dean Christopher has more than 9 years of experience assessing client discovery needs and developing tailored solutions to achieve high levels of cost savings and efficiencies. Dean works extensively with corporate legal and IT departments to design and implement practical and sustainable solutions to address the challenges associated with the constantly evolving discovery landscape. He focuses on assisting clients in identifying opportunities for optimization, from legal hold issuance through data collection, processing, document review, and production. CLIENT EXPERIENCE Prior to joining Berkeley Research Group, Dean was a manager within the discovery consulting practice at Huron Consulting Group. Dean works with clients in a variety of industries including telecommunications, energy, pharmaceutical, and financial services, with a focus on the strategic use of technology, people, and processes. Representative examples of his engagement experience include: • Evaluated the in-house data collection and processing practices of a Fortune 50 Financial Services company to identify areas for cost savings, increased defensibility, and enhanced process efficiencies. • Conducted an end-to-end discovery readiness assessment for a Fortune 50 Energy company, including review of existing staffing, discovery workflows, and associated technologies. Drafted business requirements for legal hold and collection workflows and led the RFP process for tool selection. • Collaborated with in-house counsel, external counsel, and vendors, while serving as the central point of coordination for discovery management, from collection through production, on 30+ legal matters for a Fortune 10 Energy company. PROFESSIONAL AFFILIATIONS • Association of Certified E-Discovery Specialists, CEDS
  • 21. Norman L. Comstock, Jr. Managing Director 713.493.2527 | ncomstock@thinkbrg.com PROFESSIONAL HIGHLIGHTS Norman Comstock advises clients on enterprise risk management, information technology governance, technology assurance, program management, and cybersecurity. Mr. Comstock has experience leading complex, high-profile projects and initiatives for investment due diligence, integration, divestitures, and program management for high-risk, multiyear, multi-vendor projects. He has advised clients across diverse industries and geographies including construction, energy, financial services, healthcare, higher education, high technology, and manufacturing, as well as state, local, and federal governments. Mr. Comstock advises clients on aligning IT with business strategies, creating clear IT roadmaps to support organizational business objectives, and transforming business processes to optimize outcomes. He facilitates requirements definition among key stakeholders to reduce surprises and foster sustainable change management that is technology agnostic. As a nationally recognized business intelligence (BI) professional, Mr. Comstock is also proficient in data warehousing, analytics, and reporting solutions. In the past decade, Mr. Comstock has specialized in cybersecurity risk mitigation. He has advised clients on network and application vulnerabilities, penetration testing, social engineering exploits, and growing compliance requirements that blur the lines between security and privacy concerns. Mr. Comstock has been a lecturer at the University of Houston’s C.T. Bauer School of Business since January 2007. He teaches courses in Business Ethics, Advanced Internal Audit, and Governance Risk and Compliance. He also served on Microsoft’s Business Intelligence Advisory Council in 2001 and 2002 and is an alumnus instructor of The Data Warehousing Institute. Mr. Comstock was previously president of a professional services firm, director of a Finance and Accounting practice, and a principal providing technology and management consulting services to Fortune 1000 companies. PROFESSIONAL AFFILIATIONS • ISACA Houston Chapter - President • Information Systems Security Association – Audit Committee chair • Institute of Internal Auditors - Houston Chapter Vice president, Technology • Association of Certified Fraud Examiners
  • 22. Peggy Daley Managing Director 312.429.7950 | pdaley@thinkbrg.com PROFESSIONAL HIGHLIGHTS Peggy Daley has over 25 years of experience in investigations, data analytics, dispute resolution, and regulatory compliance for multinational corporations in a variety of industries. She has conducted fraud, money laundering, and trade theft investigations on behalf of boards of directors and outside counsel, typically under circumstances requiring disclosure to relevant regulatory and law enforcement authorities. In addition to conducting high-profile fraud and due diligence investigations, she also advises clients in designing and implementing compliance programs and procedures. In 2009, Ms. Daley led the forensic technology team that supported Anthony Valukas, the examiner in the Lehman Brothers’ bankruptcy. In 2010, she testified as a fraud expert in an accounting malpractice action brought against a top national accounting firm by the trustee of a bankrupt former client of the firm. Damages claimed by the trustee in bankruptcy for the former audit client exceeded $100 million. In 2011, she led the investigation into alleged false reporting of LSAT and GPA data by the University of Illinois School of Law. She also led a hacking investigation for the university. In 2012, in connection with a preliminary injunction order in a trade secret case, she was responsible for leading a team that undertook a forensic collection, review, and remediation of the client’s entire computer network, including hundreds of servers and thousands of laptops, tablets, and cell phones located across United States. Before joining BRG, Ms. Daley was a corporate defense attorney at prominent national law firms. She also served as general counsel at a global security and litigation consulting firm. Ms. Daley is a Certified Anti-Money Laundering Specialist (CAMS), a Certified Information Privacy Professional (CIPP), and a Certified Fraud Examiner (CFE). She is a member of the Illinois Bar and a Class A private detective in Illinois. She was a member of the ABA 2013 Task Force on Corporate Monitors and the AICPA 2010–2012 Task Force on Forensic Technology. PROFESSIONAL AFFILIATIONS • American Bar Association, Criminal Justice Section, White Collar Committee -Subcommittee Chair of Financial Institutions, Anti-Money Laundering and Patriot Act; liaison to American Banking Association • Association of Certified Fraud Examiners • International Association of Privacy Professionals • Association of Certified Anti-Money Laundering Professionals
  • 23. Robert DeCicco Managing Director 858.925.8340 | rdecicco@thinkbrg.com PROFESSIONAL HIGHLIGHTS Robert DeCicco is a Managing Director in BRG’s Technology Advisory Practice and is based in California. He specializes in providing services related to data acquisition and forensic examinations for a variety of high-profile and confidential clients. His responsibilities span from hands-on examination and analysis of computer data to the day to day management of the forensics staff and the enforcement of policies and procedures. DeCicco has actively managed and participated in the collection and the subsequent analysis and processing of electronic evidence from extremely complex, disparate and sensitive technology environments throughout the world. DeCicco regularly works in conjunction with regulatory and law enforcement agencies to provide acceptable practices and forensically sound data and analysis protocols. He also maintains active involvement in the standards operating procedure committee within Navigant related to acceptable methodologies related to ESI collection and analysis in the field and in the lab. DeCicco is a court accepted expert in the fields of digital forensics, data analytics, electronic discovery & processing, computer programming, data security and electronic evidence verification. He has provided expert reports, rebuttals and defended his opinions related to computer forensics and electronic discovery in both civil and criminal matters and in state, district and federal courts throughout the country. DeCicco regularly lectures to the legal community and Computer Forensics communities on topics related to electronic discovery, cyber security and computer forensics. EDUCATION • B.S. in Management/Management Information Systems, Pennsylvania State University • Incident Response Forensic Analysis & Discovery, Guidance Software Professional Training Center • Cyber Security Incident Response, Malware Detection & Removal, Memory Forensics and Remediation – Mandiant Security Consultancy PROFESSIONAL AFFILIATIONS • Association of Certified Fraud Examiners • High Tech Crime Investigation Association
  • 24. Amit Garg Director 202.747.3483 | agarg@thinkbrg.com PROFESSIONAL HIGHLIGHTS Amit Garg brings over 15 years of IT consulting, sales, business development, strong communication, and leadership experience with a focus on delivering high value to his clients. His clients have included large federal civilian agencies, military organizations, and Fortune 500 clients in the banking, insurance, and financial services, healthcare, life sciences, consumer products, and retail verticals. Amit’s areas of expertise includes enterprise security program management, enterprise governance, risk management, and compliance (eGRC), data protection, business resiliency, security culture awareness and training, project management, and cybersecurity due diligence for mergers, acquisitions (M&A) and divestitures. He has extensive experience and is familiar with various regulatory requirements including FISMA, HIPAA, NIST, and is knowledgeable of industry best practices across multiple verticals. Amit holds an M.S. in Information Security Management from the George Washington University and a BA in Economics from Emory University. CLIENT EXPERIENCE Some of Amit’s notable engagements include the following: • Served as the Information Assurance Officer and provided advisory services for two of the world’s largest clinical IT electronic medical health records deployed at over 100 sites worldwide for the US Dept. of Defense Military Health System. • Developed an IT Security Due Diligence Framework for assessing risk for potential acquisition targets for a Fortune 100 retail organization. • Advised the Office of the CIO and key business functions of a Fortune 500 retail organization on data segregation strategies and delivered multiple workshops to senior executives. • Led the assessment and selection process of a GRC vendor for an enterprise risk management solution for a Fortune 500 bank. PROFESSIONAL AFFILIATIONS • Certified Member #93209, International Information Systems Security Certification Consortium (ISC2) • Certified Member #522857, Project Management Institute (PMI) • Certified Member #7853, Business Continuity Institute (BCI) • Member, International Association of Privacy Professionals (IAPP) • Member, Information Systems Security Association – Northern VA Chapter
  • 25. Dr. Lance Hayden Managing Director 512 .438.9064| lhayden@thinkbrg.com PROFESSIONAL HIGHLIGHTS Lance Hayden has worked in information security for 25 years, beginning his career as a human intelligence (HUMINT) operations officer with the Central Intelligence Agency. He has acted as a trusted security advisor to government, military, and enterprise customers across industries including banking and finance, insurance, healthcare, retail, energy, and internet service providers. Mr. Hayden previously developed and managed a boutique IT governance, risk, and compliance (IT GRC) consulting practice inside a global networking and technology company. This team provided high-value service engagements focused on information security strategy and culture, risk management and assessment, security evaluation and metrics, and compliance support. Mr. Hayden has extensive experience with international standards including the ISO 27000 information security family and with industry frameworks and regulations including PCI DSS, HIPAA, FISMA, COBIT, and CMMI. He holds CISSP, CISM, CRISC, and ISO 27001 Lead Auditor professional certifications. Mr. Hayden’s research specialties are in the areas of information security culture, security metrics, privacy, and surveillance. A regular speaker and contributor in information security industry conferences and publications, Mr. Hayden is also the author of IT Security Metrics: A Practical Framework for Measuring Security and Protecting Data and the forthcoming People-Centric Security: Transforming Your Enterprise Security Culture, both from McGraw-Hill. He is an adjunct faculty member of the University of Texas School of Information and a member of the iSchool Advisory Board. EDUCATION University of Texas Ph.D., Information Science, 2009 MLIS, Information Science, 1997 University of New Mexico B.A., English, 1991 PROFESSIONAL AFFILIATIONS (ISC)2, Member ISACA, Member ISSA, Member
  • 26. Robert Hichens Managing Director 713.493.2554 | rhichens@thinkbrg.com PROFESSIONAL HIGHLIGHTS Robert Hichens has more than 29 years of experience in corporate IT and consulting, with a focus on the strategic and tactical utilization of technology. His extensive experience crosses industries including energy, pharmaceutical, aerospace, consumer products, and financial services. His consulting expertise covers areas of litigation technology solutions, electronic discovery, and business process analysis and design. His background brings together the disciplines of technology, business, and law, allowing Mr. Hichens to deliver a range of discovery and information management consulting services. Mr. Hichens previously worked at two large consulting firms. His experience also includes roles as an IT partner and director for Mortgage Operations and Compliance at a real estate investment trust, global IT director for Design and Development Systems at a major manufacturing company; and senior manager in Arthur Andersen’s Legal Technology practice. He held a variety of technology positions at a leading global security company, including director for Corporate Litigation Support Systems. Mr. Hichens focuses on developing strong business relationships and streamlining business processes for corporations, utilizing technology to yield efficiencies to existing operations, and reducing costs. Representative examples of his engagement experience include: Developed a company-wide records retention schedule and information disposal program for email, physical and electronic records for a large cruise line. Performed over 20 IBM/PSS Atlas LCC, Exterro Fusion, and Zapproved Legal Hold Pro implementations for Fortune 1000 companies across a variety of industries, including oil and gas, healthcare, utilities, financial services, legal, and high technology. Defined new business processes, roles and responsibilities, reporting, training, and change management materials. PROFESSIONAL AFFILIATIONS • Association of Records Managers and Administrators • Compliance, Governance and Oversight Council • Preservation Excellence (PREX) Member
  • 27. David Jimenez Senior Managing Consultant | Houston 713.493.2553 | djimenez@thinkbrg.com PROFESSIONAL HIGHLIGHTS David Jimenez is a Senior Managing Consultant with Berkeley Research Group. Prior to joining BRG, he was a Manager with Huron Consulting Group. He has over 12 years of experience and expertise advising both corporate and law firm clients on information technology issues. He specializes in performing legally defensible electronic collections and conducting digital forensic investigations, e- discovery project management and incident response. CLIENT EXPERIENCE Mr. Jimenez has utilized his technical skills to collect and analyze data from a broad spectrum of sources including geolocation and seismic equipment, physical access control systems, medical devices, mainframes, and air quality monitoring instruments. Mr. Jimenez has performed hundreds of computer forensic investigations, performed onsite analysis of cyber security breaches, and has assisted legal counsel with the preservation and management of large volumes of data in response to civil litigation, government inquiries and internal investigations. PROFESSIONAL AFFILIATIONS • EnCase Certified Examiner (EnCE) • Cisco Certified Network Associate (CCNA)
  • 28. Robert G. Kurtz Managing Director 646.862.0978 | rkurtz@thinkbrg.com PROFESSIONAL HIGHLIGHTS Bob leads the Technology Advisory Practice (TAP) and as such focuses on IT Strategy, Program Management and Information Governance and Security Management across all of BRG’s industry sectors. Before joining BRG, Bob was a founder of a boutique consulting firm and selected by his peers as their president. Prior, he was Vice President of Information Technology at Time Warner where he oversaw a 150 person IT Department and he was also Executive Director of Corporate Technology at The New York Times. Bob also was a Practice Leader at KPMG and Deloitte’s Media and Digital Asset Management teams. Bob is a renowned subject matter expert in Global Enterprise Requirements Planning (ERP) systems and digital content management. His areas of expertise include Program Management, Organizational Change Management, Process Improvement, Business and IT Strategy/Transformation, Customer Relationship Management,, Financial Management, Supply Chain Management, Outsourcing/Shared Service Center creation, Governance, Risk and Compliance. He has advised clients in the areas of new product development, service offerings and key hiring decisions and is frequently called upon by clients to provide advice on financial related technology matters including feasibility studies, software requirements and selection and ROI analysis Bob has served as PMO Director for Dun & Bradstreet’s (D&B’s) Governance, Risk and Compliance Group overseeing the implementation of a multi-million dollar Foreign Corrupt Practices Act (FCPA) compliance enterprise application now being used globally by such companies as Walmart, Microsoft, Bechtel and others. Bob was also brought back into D&B to manage the implementation of a Foreign Account Tax Compliance Act (FATCA) solution for the banking industry. He has been the project executive who led the building of a new call center for the largest gas utility company in West Virginia. Governor, Joe Manchin, now Senator Manchin, presided over the ribbon cutting ceremony. As Program Manager, Bob led the global implementation of Microsoft Dynamics SL™ at a Texas-based energy plant maintenance corporation saving the company millions per year and providing them with product costing information they never had before that allowed for better product pricing and margin building. He was the Executive Project manager for the SAP ™ implementation at AIG’s Global Investment Group. We were honored to have been selected several times to provide consulting services to Educational Testing Service (ETS). Bob assisted ETS in the implementation of several new PeopleSoft ® modules , website redesign, outsourcing activities and general ledger chart of account redesign. EDUCATION New York University Stern School of Business – MBA in Computer Application and Information Systems New York University Stern School of Business – BS in Quantitative Analysis and Management PROFESSIONAL AFFILIATIONS Earned a CPA, CISA, CSP, CIA, CDP. Post Graduate Certificate in Accounting from NYU, a member of the AICPA and the NY State Society of CPA’s, a past president of Information Systems Audit and Control Association NY Chapter, Past Chairman of the ISSCA International Conference at the Waldorf=Astoria in New York Have written articles and received awards from the Financial Executives Institute, the International Newspapers Financial Executive and Information System Audit and Control Association.
  • 29. Richard Peters Director 713.493.2545 | rpeters@thinkbrg.com PROFESSIONAL HIGHLIGHTS Richard Peters brings over 14 years of experience managing, performing, and delivering information technology security solutions. This experience includes technology risk management, IT auditing, IT security assessments, internal auditing, attack-and-penetration testing services, and security analysis in domestic and global entities in the energy, technology, financial, and manufacturing industries. Mr. Peters is skilled in designing, assessing, and testing against multiple security standards and frameworks, including ISO 27001/27002, Payment Card Industry Data Security Standard (PCI DSS), COBIT, and the National Institute of Standards and Technology (NIST). He has been a professor at the University of Houston teaching information security. He is a frequent speaker and leader at major security conventions around the country. Mr. Peters has considerable experience within the information security and auditing/assessment niche. He has knowledge and background in client/server environments, mainframes, and databases, as well as application and hardware experience. He has provided PCI-related services for over six years, including PCI DSS assessments, PA DSS assessments, and ASV services. Mr. Peters also has experience communicating with and between executive leadership and technical teams regarding understanding of risk. EDUCATION University of Texas at Austin BBA, Finance, 1996
  • 30. David Phillips Managing Director 512.431.6219 | dphillips@thinkbrg.com PROFESSIONAL HIGHLIGHTS David Phillips brings more than 25 years of information technology experience and has advised U.S. military, Fortune 100 clients, and foreign governments on information security risk programs, IT network security architecture, and regulatory compliance. Mr. Phillips developed a growing professional service business inside a multinational networking corporation focused on cybersecurity, protecting clients’ intellectual property and customer data, and securing networks to allow for resilient IT infrastructure in the face of cyber-attacks. His clients have included multibillion-dollar businesses in the retail, finance, manufacturing, oil and gas, and healthcare verticals. He has worked with global enterprises to measure and mature their security capabilities across people, process, and technology across levels from technology management to security awareness and security cultural transformation. David has experience building global consulting teams with capabilities in all major business markets; UK, EU, India, Japan, Middle East, ANZ, Latin America, and Brazil. David has extensive experience in IT governance, risk, and compliance (IT-GRC); IT security program development; IT security metrics; international standards such as ISO 27001, ISO 27005, and ISO 31000; and industry frameworks including HIPAA, PCI, NERC, and NIST guidelines. CLIENT EXPERIENCE David brings extensive success and consulting experience in providing effective information security programs in areas including: • Security Culture Assessments • Security Metrics Program Development • Unified Information Security Controls Frameworks • Medical Device Risk Assessment Methodology • Penetration and Vulnerability Management PROFESSIONAL AFFILIATIONS International Information Systems Security Certification Consortium (ISC)², Information Systems Security Association (ISSA), InfraGard (FBI Critical Infrastructure Partnership), Cybersecurity Benchmarking Association (CYSBA)
  • 31. William Poirier, EnCE Consultant | Chicago 312.429.7951 | wpoirier@thinkbrg.com PROFESSIONAL HIGHLIGHTS William Poirier is a member of BRG’s Technical Advisory Practice and specializes in conducting computer forensic and due diligence investigations. His work involves all stages of discovery, including data mapping, collection/preservation, analysis, hosting, review, and document production. He has conducted forensic investigations involving embezzlement, trade secret and intellectual property theft, data breaches, health care compliance, and fraud. William is also a skilled researcher and part of BRG’s Global Investigations + Strategic Intelligence practice. William mines public records and electronic database resources to perform comprehensive and revealing due diligence background investigations of companies and individuals. Subjects have included hedge fund managers, broker-dealers, expert witnesses, international gaming operations, real estate developers, high-frequency trading firms, and academic administrators. CLIENT EXPERIENCE • Led a document review team for a data set of over 20 million documents as part of a red flag analysis on behalf of Irving Picard, the Trustee of Bernie L Madoff Investment Securities, LLC. • Performed a forensic collection, review, and remediation of the entire computer network of a leading life sciences company in accordance with a preliminary injunction order barring the defendant from selling its products until all of the plaintiff's trade secrets were eradicated. Over 138 TB of data was collected from approximately 500 sources in only three weeks’ time. • Was the lead collection specialist on behalf of a governmental agency involved in litigation over a failed IT implementation. Personally collected forensic images from hundreds of sources including personal computers, USB drives, smart-phones, servers, DVDs, printer/copiers, and floppy discs. Administered the review platform which hosted the case’s largest dataset. PROFESSIONAL AFFILIATIONS • EnCase Certified Examiner (EnCE) • Associate Board, Legal Aid Society • PERC, Illinois Department of Financial and Professional Regulation
  • 32. Antonio Rega Director 646.651.4734 | arega@thinkbrg.com PROFESSIONAL HIGHLIGHTS Antonio Rega, EnCE, CCE, CFE, is a regional leader within BRG's Global Investigations and Strategic Intelligence practice and specializes in technology and eDiscovery services. On behalf of global corporations and law firms, Mr. Rega has been engaged as project lead on matters relating to intellectual property/trade secret theft, information governance, data privacy/security, internal audits, investigations, fraud cases, and mergers and acquisitions. He has submitted both affidavits and expert reports detailing his work as a consulting and analysis expert on complex forensic matters and has provided sworn testimony on matters relating to computer forensics and eDiscovery. Mr. Rega’s recent engagements of note include acting as originator and team lead on behalf of counsel for a class action lawsuit of a national healthcare provider, preparing matter-specific and advanced methodologies for patient record/electronically stored information (ESI) preservations across geographical locations in tandem for subsequent forensic analysis and hosted review by counsel; acting as team lead on a data breach investigation, culminating in a report to the FBI identifying transferred IP via analysis of server log and Web browsing history; and acting as primary lead on a high-profile SEC investigation into the finances of a publicly traded oil and gas company CEO, where Mr. Rega led an on-site team in conducting custodial and IT interviews, as well as ESI preservations, in addition to drafting and finalizing a formal memo summary presented to counsel and vetted by external auditors. He also acted as originator and lead on a large-scale and sensitive investigation into alleged money laundering and suspicious activity on behalf of a law firm’s client, an international Asian bank. This matter included data preservations within state data-privacy provisions, forensic analysis, and expert reporting, as well as hosting a long-term processing and review platform within the client’s facility in Asia in compliance with data-privacy restrictions. PROFESSIONAL AFFILIATIONS • Association of Records Managers and Administrators (ARMA) • Association of Certified Fraud Examiners (ACFE) • International Society of Forensic Computer Examiners (ISFCE)
  • 33. Ron Schnell Director | Washington, DC 202.909.2793| rschnell@thinkbrg.com PROFESSIONAL HIGHLIGHTS Ron Schnell is an accomplished executive with a history of running large technology organizations, from early stage startups to large divisions of S&P 500 corporations. He has recently specialized in auditing and enforcing Microsoft's compliance with the consent decree in United States v. Microsoft Corporation. Mr. Schnell ran the day-to-day operations of the Technical Committee, a private corporation ordered to be formed by the U.S. Courts for the sole purpose of monitoring Microsoft for its compliance with the antitrust Final Judgments of 2002. The organization and its success were publicly praised by the U.S. Attorney General, attorneys general for several states, and the federal court judge presiding over the largest antitrust case in U.S. history. CLIENT EXPERIENCE Mr. Schnell has also served as an expert witness on several high-profile cases in the areas of intellectual property, software licensing, cybersecurity, and other highly technical matters. He has knowledge of over 40 computer languages. He is currently an adjunct professor at Nova Southeastern University.
  • 34. Teresa P. Schoch Associate Director | Washington, DC 202.909.2787 | tschoch@thinkbrg.com PROFESSIONAL HIGHLIGHTS Teresa P. Schoch is a nationally recognized expert in information retrieval software, global research, global privacy, records and document management, and information governance. Her diverse experience includes the practice of law, management of a successfully sold software company, adjunct professorships, law-firm information management, eDiscovery management, and team building within corporations and law firms (30+ employees). She has also provided records management consulting to law firms and corporations, marketing and sales management, privacy management, law library management, property management, and disaster recovery management for the federal government (top-secret clearance). She has published frequently in her areas of expertise and for online and database magazines, and she is a decision maker and writer for the Michigan State Bar Ethics Committee. CURRENT CERTIFICATIONS • Certified Records Manager, The Institute of Certified Records Managers • Information Governance Professional, American Records Management Association • Electronic Records Management Masters, Association for Information and Image Management • Certified Change Manager, ProSci • Certified Informational Professional, AIIM • Certified Information Privacy Professional, International Association of Privacy Professionals • Certified Law Librarian, American Association of Law Libraries PROFESSIONAL AFFILIATIONS • ICRM (The Institute of Certified Records Management) • AIIM (Association for Information and Image Management) • ARMA (American Records Management Association) • IAPP (International Association of Privacy Professionals) • Licensed attorney Michigan and Florida (inactive)
  • 35. Joe Sremack Director 202.909.2786 | jsremack@thinkbrg.com PROFESSIONAL HIGHLIGHTS Joe Sremack has over a decade of information technology and consulting experience. He develops and implements solutions to advise corporate and legal clients in matters involving complex technology issues. Mr. Sremack’s expertise is in IT assessments, electronic discovery, and complex data analytics involving transactional and disparate data. A computer scientist by training, Mr. Sremack has conducted numerous matters involving system investigations, data analysis, and the evaluation of technology solutions. He has advised clients across the United States and internationally in matters such as class-action settlement distribution, intellectual property theft, bankruptcy, financial fraud, healthcare regulatory investigations, and antitrust disputes. He has worked with clients in industries including telecommunications, finance, healthcare, energy, government, retail, and insurance. He is a frequent publisher and speaker on issues related to electronic discovery and transactional data. EDUCATION North Carolina State University M.S., Computer Science College of Wooster B.A., Computer Science and Philosophy PROFESSIONAL AFFILIATIONS • IEEE Information Theory Society Member • American Bar Association • Sedona Conference Working Groups 1 and 11 • ARMA International