Recorded: 2026-04-15
Qualifies for 1.0 CPD hour, all of which qualify for Ethics

Lawyers are often contacted after a cybersecurity incident is believed to be finished. Systems may be back online, and the organization may believe the issue is contained. In many cases, however, communications have not yet gone out or have been sent before the organization has fully considered its legal, regulatory, insurance, or contractual obligations. This stage is where gaps can frequently surface and where legal exposure may increase.
This session focuses on what lawyers commonly encounter once the urgency of the initial incident has quieted. Timelines may be incomplete, documentation may be missing, and early decisions, particularly around communications, may not be clearly recorded or may have been made without full advice. Clients may be unaware that regulatory obligations, insurance conditions, or contractual duties remain outstanding, or that earlier actions may narrow their options going forward.
In some cases, the root cause has not been addressed, and the organization may still be vulnerable. Participants will learn how to recognize these signals of trouble early, how to ask practical and targeted questions, and how to guide clients toward steps that may help reduce further risk. The session emphasizes legal awareness rather than technical expertise and supports lawyers in identifying the issues that tend to matter most at this stage of an incident.

Participants will leave with:
A clear framework for spotting early indicators of unresolved or escalating cyber risk
Practical suggestions for distinguishing technical remediation from legal risk signals
Actionable next step considerations for guiding clients forward

Presenters:
David Krebs, Miller Thomson LLP
Brennen Schmidt, ALEUS Consulting Group
----------
This content has been prepared for use in conjunction with a CPD program hosted by the Law Society of Saskatchewan. Reproduction of any portion of the program content, for purposes other than personal use, without the express written consent of the Law Society is strictly prohibited. The presenters have assumed that viewers will exercise their professional judgment regarding the correctness and applicability of the program content. The Law Society can accept no responsibility for any errors or omissions and expressly disclaims any such responsibility.

This transcript has been generated by an automated speech recognition system and may contain misspellings, mistranslations, or errors. It may be incomplete or inaccurate due to inaudible passages or speech recognition errors. It is provided as-is without any warranties or guarantees of accuracy. The Law Society of Saskatchewan does not assume any responsibility or liability for the use or interpretation of this transcript.