D. Kall Loper

About D. Kall Loper

I lead BDO’s Data Breach Review (DBR) services offering. DBR combines cyber incident response and business crisis management to serve BDO’s clients and their counsel during cyber security events. The active components of BDO’s DBR service provide clients with a defensible understanding of data exposed and possibly exposed by threat actors and insider threats. Preventive and protective components of DBR guide corporate leaders and Boards of Directors to anticipate threats and plan for effective response, business continuity, and recovery activities. I have provided incident response, threat intelligence, and corporate crisis management to clients through hundreds of incidents and investigations over 28 years of direct service with additional years as a researcher in cyber threat. The opinions expressed on this site are my own and do not necessarily represent the views of BDO USA, P.C.Previous experience includes leading a global practice for the merged FishTech/Herjavec Group entity, Cyderes. I had primary responsibility for designing DFIR offerings and developing delivery capabilities. This included financial responsibility, staff development, policies and procedures, marketing materials, visibility in the marketplace, key account delivery and advisory, and collaborative responsibility budgeting, staffing, contractual risk, PnL, and global leadership.Prior to Cyderes, I worked to rebuild a national incident response practice to a global-scope practice with numerous collateral offerings and supporting member firms world-wide. I participated in the growth of a global firm\'s revenue by 2.5x during a five year period (breaking the billion dollar mark and going well beyond). I worked with great people and left a much better practice than I found. I am a professor in the Computer Science Department at Southern Methodist University where I have taught and researched for over a decade. I have been involved in computer forensics and security since 1997. My dissertation used field data to create an empirical study of hacker \"types\"(clustered characteristics). This required creating a mailspooI parser to investigate the data (an early forensic tool). I went on to publish part of this with in an article on using attack graphs for threat intelligence and IDS/IPS modeling. I have co-authored Electronic Crime Scene Investigation 2nd and 3rd editions for the US Department of Justice.

Experience

1. Managing Director

   BDO

   Mar 2025 — Present · Dallas-Fort Worth, TX, US

   I lead BDO’s Data Breach Review (DBR) services offering as part of BDO\'s Privacy and Data Protection Practice. DBR combines cyber incident response and business crisis management to serve BDO’s clients and their counsel during cyber security events. The active components of BDO’s DBR service provide clients with a defensible understanding of data exposed and possibly exposed by threat actors and insider threats. Preventive and protective components of DBR guide corporate leaders and Boards of Directors to anticipate threats and plan for effective response, business continuity, and recovery activities. I have provided incident response, threat intelligence, and corporate crisis management to clients through hundreds of incidents and investigations over 28 years of direct service with additional years as a researcher in cyber threat. The final motion in this offering is to coordinate clients with additional services including policy review/assessments and technical integration of new controls such as integration of multiple providers in a rational security architecture.

Education

• Southern Methodist University

  Faculty, Computer Science and Engineering

  2008 — 2023

• L.D. Bell

  High School

  1987 — 1990

• Texas Christian University

  BS, Criminal Justice & Sociology

  1990 — 1994

• Michigan State University

  PhD, Criminal Justice

  1994 — 2000

Skills

• Information Security
• Security Audits
• Expert Witness
• Research
• Security
• Private Investigations
• Risk Assessment
• Information Security Management
• Consulting
• Investigation
• Litigation Support
• Vulnerability Assessment
• Training
• Fraud
• Program Management
• Incident Response
• Criminal Investigations
• Cybercrime Investigation
• Computer Security
• Digital Forensics
• Network Security
• Cyber Threat Intelligence
• Soc Operations
• Fraud Investigations
• Policy
• Security Awareness
• Public Policy
• Criminal Justice
• Computer Forensics
• Ftk
• Encase
• Published Author
• Management
• File Systems
• Security Operations
• Penetration Testing
• Forensic Acquistion
• Evidence
• Criminal Law
• Forensic Analysis