David Sun

About David Sun

I get called when executives have a cyber crisis.Whether a company has been hit by hackers, had their own employees steal sensitive information or leaders just lose sleep fearing these things could happen, I help business leaders understand what happened in their systems and what they should do to make their way out of the IT crisis. I am a technologist, first responder, crisis manager and litigation expert with a unique understanding of what matters most in cybersecurity.During my 25 years of experience managing data breach and privacy incidents, internal employee malfeasance and government agency investigations I have helped nearly a thousand organizations:• Respond to ransomware attacks, conduct ransom negotiation and resume business operations• Investigate email compromises, data breaches and multi-million-dollar losses from wire fraud • Perform forensic analysis, reconstruction and post-breach remediation • Prosecute departing employees for theft of sensitive information, destruction of documents and unauthorized activities• Create effective cybersecurity programs to improve data and systems security to avoid the above issuesI have served as a consulting expert, testifying expert or court appointed expert on hundreds of litigation matters and specialize in describing technology-related issues in understandable terms to executives, attorneys, judges, and juries. Examples of my experience that I can disclose include: • Expert testimony during the Secretary of State Hillary Clinton e-mail server controversy • Investigation into destruction of public records by sitting New Orleans Mayor C. Ray Nagin• Assisting Attorney Generals from multiple states investigate various data privacy violations• Security assessments for the United Nations and various United States Federal Reserve Banks • Spending a year securing the 2004 Summer Olympics in Athens, Greece• Adjunct Professor of Computer Forensics at George Mason University • Faculty member for the Virginia and Massachusetts State Bars’ continuing education programs• Multiple patents and publications in the field of Computer ForensicsFeel free to message me if you need my expertise or assistance from my team.

Experience

1. Partner

   CohnReznick

   Apr 2023 — Present · Tysons Corner, VA, US

   For twenty five years I have helped clients with data and systems security, cyber forensic response and post-breach remediation. I am a practical problem solver and technologist, describing technology related issues in understandable terms to executives, attorneys, judges and juries. I have testified as an expert witness in various federal and state courts in the areas of computer forensics and cybersecurity.I am a Principal at the firm, leading our security incident response and recovery; computer forensics and litigation; and cloud security services. I lead a team of professionals responding to data breaches and ransomware attacks, negotiating ransom payments, and conducting employee malfeasance and government agency investigations for both public and private sector clients. In addition, we provide a suite of proactive cybersecurity services to help mitigate the risk of a cyber attack.

Education

• Virginia Tech

  Bachelor's of Science, Electrical Engineering

• Virginia Tech

  Masters of Science, Electrical Engineering

Skills

• Software Development
• Firewalls
• Cloud Computing
• Litigation Support
• Penetration Testing
• Information Security
• Ip
• Business Development
• Project Management
• Vulnerability Assessment
• Information Security Management
• Cissp
• IT Management
• Risk Management
• Forensic Analysis
• Malware Analysis
• Security
• Start-Ups
• Networking
• Computer Forensics
• Integration
• Encase
• Routers
• Intellectual Property
• Linux
• Network Security
• Strategic Planning
• Corporations
• Program Management
• Computer Security
• Network Architecture