GC Agenda: September 2025

Data Strategy, Security & Privacy attorney Mark Francis contributed to Practical Law The Journal's "GC Agenda," a roundup of prominent issues that general counsel should note when advising clients. The publication covers practice areas ranging from antitrust and commercial transactions to labor and employment and taxes. Mr. Francis' insights were featured in the Data Privacy & Cybersecurity section, where he shared how cyber threat actors are targeting human and process vulnerabilities in response to improved technical controls at companies. He explained that individuals and hacker groups are increasingly relying on sophisticated social engineering tactics, as well as artificial intelligence (AI) tools, to exploit coverage gaps and inflict maximum damage. Examples include hackers impersonating individuals and convincing IT help desks to reset credentials, abusing customer service processes and taking advantage of weak customer verification protocols, and even creating false identities to get hired as remote IT workers. To mitigate risks and prevent costly cyber incidents, Mr. Francis recommends steps such as reinforced training for employers and contractors along with continuous reviewing and updating of cybersecurity procedures to help protect an organization.

READ: GC Agenda: September 2025 (Subscription required)