When AI Is a Four-letter Word: The Next Great Corporate Dilemma

John deCraen is an Associate Managing Director in the Cyber Risk practice of Kroll, based in Dallas. He has over two decades of experience working with Global Fortune 500 businesses and AmLaw 100 law firms, delivering high-profile enterprise-class solutions enhanced with strategic and technical cyber security program leadership and guidance. He specializes in digital forensics, incident response, information security risk and compliance assessment matters that demand investigative and analytical thinking.

Prior to joining Kroll, John was a Senior Director with Alvarez & Marsal’s Global Cyber Risk Services practice in Dallas. He was the original member of the firm’s Global Cyber Risk Services practice, where he was heavily involved in developing the culture, systems design, standard procedures and talent management throughout its 16-year history. He was also the lead architect and implementor of the firm’s data centers, systems and processes responsible for managing all the litigation support efforts for the world’s two largest bankruptcies, simultaneously. These systems ultimately processed many petabytes of data and hosted data for more than 700 high-profile legal cases.

Previously, John has also led and substantially contributed to many digital forensics and cyber security investigations worldwide, which includes representing a state insurance commissioner and a U.S. regulatory body on a comprehensive and global examination of the world’s largest insurance company’s cyber security and privacy programs. Further, he also designed and built a real-time end-point vulnerability and risk scoring system for a leading national ONG pipeline management company.

John also has extensive experience in the strategy and architecture of complex computing environments that include infrastructure design, entitlement programs, policy development, standards implementation and risk management frameworks. He is particularly strong in the area of cyber risk assessment having assisted multiple clients in determining their alignment with NY-DFS, HIPAA/HiTrust, DFARS, GDPR, FFIEC, and a range of maturity and risk models. He also has expertise in one-on-one and panel-on-one interview and evidence collection.