Anatomy of a Cyber Ransom

Chief Executive Officer, Haiku Cyber Range

Eric Basu

Eric Basu is a serial entrepreneur and former officer in the U.S. Navy SEAL Teams. His first company, Sentek Global, he bootstrapped from his living room to become the largest small business defense contractor in San Diego, selling Sentek to Deloitte Consulting in 2021.

Eric’s current company, Haiku Cyber Range, has a suite of patented cybersecurity products designed to train people in cybersecurity skills through the use of computer games. Eric holds a BS in Molecular Biology from San Jose State University and an EMBA from UCLA. He is a frequent speaker on panels on cybersecurity, leadership, and entrepreneurship. He serves on the Boards of non-profit organizations Saved in America and the San Diego Cyber Center of Excellence.

Senior Vice President, Enterprise, Security & ISO, American Specialty Health

Tina Mitchell

Tina Mitchell is Senior Vice President, Enterprise Security and Information Security Officer at American Specialty Health, a premier independent and privately-owned specialty health organization. In this role, she is responsible for the enterprise security risk management strategy focused on the protection of corporate information and technology assets.

In addition to being a strategic partner and trusted advisor to executive leadership, she oversees the enterprise security program which includes information security governance, risk management, security technologies, physical security, vendor management, security awareness training, incident response, disaster recovery/business continuing planning, maintaining industry certifications, and compliance with state and federal privacy/security regulations.

In Tina’s 27 years with American Specialty Health, she has held various positions within Information Technology ranging from hands-on systems administration to management positions. Just prior to becoming dedicated to Enterprise Security, Tina held the position of Vice President of IT Operations for eight years.

Tina holds a Bachelor of Arts in Business and Information Systems, from National University, and a Master of Science in Executive Leadership from the University of San Diego’s Graduate School of Business. She is a Certified Chief Information Security Officer (C|CISO), Certified Information Security Professional (CISSP) and a Certified Information Security Manager (CISM). She is also an active member of the San Diego CISO Roundtable and InfraGard, San Diego chapter.

Partner, US Chair and Global Co-Chair, Data Protection, Privacy and Security Practice, and US Chair and Global Co-Chair, Cybersecurity Practice; DLA Piper

Andrew Serwin

Andrew Serwin is one of the pre-eminent privacy and security practitioners in the world. Clients describe him as a “rock star lawyer,” “a walking encyclopedia on anything data protection related” and “a tireless worker, holding onto the ever-shifting puzzle pieces of the law in this area in a way that other privacy lawyers cannot” (Chambers USA). For his work in data protection and privacy, Andrew is an inaugural inductee into the 2017 Legal 500 Hall of Fame, comprised of outstanding US lawyers who have been recommended as Legal 500 Leading Lawyers for the last six consecutive years. He was also recently named one of the Daily Journal‘s Top 100 Lawyers in California for 2016 and a National Law Journal 2015 Cyber Security & Data Privacy Trailblazer, recognizing the 50 people “who have helped make a difference in the fight against criminal cyber activity.”

Andrew offers clients the practical experience that comes from having counseled on many of the highest profile privacy and cybersecurity matters of recent years, with the breadth of knowledge that comes from authoring the premier global treatise on privacy and cybersecurity.

With extensive business and leadership experience, Andrew understands his clients’ businesses, industries and unique challenges. He has founded, advised and served on the board of directors of many companies, particularly in the transformational technology and media sectors He also holds advanced certifications in governance, including as a National Association of Corporate Directors (NACD) Governance Fellow and Carnegie Mellon University’s Computer Emergency Response Team (CERT) certification in cyber oversight.

Andrew is a noted public speaker and author and the only law firm lawyer ever to be named to Security Magazine‘s prestigious “25 Most Influential Industry Thought Leaders.” He wrote the leading treatise on privacy and security, Information Security and Privacy: A Guide to Federal and State Law and Compliance and Information Security and Privacy: A Guide to International Law and Compliance (West 2006-2016), collectively a 5,500-page, three-volume treatise that examines all aspects of privacy and security laws, published by Thomson-West. The treatise has been called “the best privacy sourcebook,” “an indispensable resource for privacy professionals at all levels,” and “a book that everybody in the information privacy field should have on their desk.” He has published numerous other books and law review articles and routinely authors client alerts on cutting-edge privacy and cybersecurity developments.

Owner, TRFC Enterprises, LLC; Fmr. Chief Information Security Officer, San Diego Port Authority

Robert Renzulli

Robert Renzulli is a Security Strategic Advisor and founded CyberGeist Security which focuses on Advisory Services for Innovation, Research & Development, Strategy in the Physical and Cyber Security Domains. He is the former Chief Information Security Officer (CISO) for the Port of San Diego, where he was responsible for the overall security and strategy for the Port Authority District. He has 30+ years of experience in Innovation and R&D in Air Defense, Military Intelligence (TAC-EW), Law Enforcement, Federal and State Agencies, Critical Infrastructure, and Commercial and Private sector enterprises.

As the former CISO for Port of San Diego, Mr. Renzulli was the first Board confirmed CISO since the Port Authority was established in December 1962. He successfully led the Incident Response/Investigation teams as the Incident Commander during a Ransomware event in 2018. Robert collected critical forensic data provided to Law Enforcement, which contributed to Indictments of two foreign Nationals that had targeted more than 200 public safety institutions, municipalities, including U.S. hospital systems, and governmental entities.

Robert also currently serves as a Special Advisor for the San Diego Cyber Center of Excellence (CCOE), Subject Matter Expert for the Sector San Diego Area Maritime Security Committee (AMSC) Cyber subcommittee. Security Advisor for National Foundation for Autism Research (NFAR) Cyber Workforce Development, and as a Senior Maritime Security Special Advisor for Stephenson Technologies Corporation (STC), a Nonprofit 501(c)3 Louisiana State University (LSU) Affiliate.