PROFESSIONAL EXPERIENCE
Kiran is an experienced lawyer, business executive, and computer engineer, a combination that has enabled him to shape and grow successful companies across many industries. Spending years as a business executive - as Chief Executive Officer, Chief Strategy Officer, and Deputy General Counsel - Kiran knows how critical it is for a company to proactively address and respond to cybersecurity and other business vulnerabilities.
Most recently, Kiran served in the C-Suite of several fintech and digital asset companies. Previously, he was a partner in the data security and privacy practice of a major international law firm, where he advised companies on cybersecurity, national security, and privacy issues.
In government, Kiran served as Deputy General Counsel at the US Department of Homeland Security, working directly with leaders of corporate America on the intersection of cybersecurity and privacy with law, policy, and technology. He held a similar role at the US Department of Justice as Senior Counsel to the Deputy Attorney General.
Before entering the legal profession, Kiran was a lead program manager at Microsoft Corporation where he had responsibility for developing and deploying software tools and technologies that improved the security, compatibility, and overall application experience of the Windows operating system. He also worked at a venture capital firm in New York where he focused on identifying undervalued technology companies and helping them achieve their potential.
Kiran is director emeritus of cybersecurity programs and an adjunct professor at the Scalia Law School at George Mason. He also currently teaches Cybersecurity Governance and Cybersecurity Risk at the Kogod School of Business at American University.
PRACTICE AREAS
Risk Assessments & Governance Strategies
Provide top-down, enterprise-wide cybersecurity risk assessments and gap analyses; conduct in-depth reviews and optimize existing information security, supply chain, and vendor management programs; develop and conduct customized cyber threat tabletop exercises; serve as hub advisors to organizations’ technical, legal, and operational stakeholders; translate and implement regulatory requirements; and formulate and advance government advocacy strategies for data security-related issues.
Incident Response
Lead incident response teams; oversee forensic investigations, containment, and remediation efforts; engage with regulators; develop strategic communications and law enforcement outreach strategies; and manage and effectuate statutory, contractual, and reputational notices.
Government Oversight & Investigations
Provide strategic counsel to mitigate the risk of government investigations and regulatory enforcement actions; defend organizations in cyber and national security related investigations by government authorities; conduct internal investigations; respond to lawful access requests from government authorities.
AI Advisory Services
Advise clients on the secure development and adoption of AI technologies and strategies to effectively manage the risks associated with this transformational technology.
Cyber & Data Privacy Litigation
Represent clients in litigation arising from cyber and data privacy incidents, including consumer class actions and complex business disputes stemming from incidents. Manage all aspects of litigation: pleadings, discovery, trial, appeal and settlement.
Executive & Board Advising
Advise individual executives and boards on managing risk, improving preparedness, and responding effectively to incidents.
Blockchain Advisory Services
Develop and implement compliance frameworks and strategies designed to mitigate risks, including providing practical advice regarding regulatory and enforcement issues, such as money laundering, know-your-customer requirements, and economic and other financial sanctions regimes.
Threat Intelligence
Securely search and monitor sources, including deep and dark web channels, to Identify potential threats to and risks for organizations, including targeting by malign actors, exposure of sensitive or otherwise confidential information, data breaches affecting clients and third-party business partners, and insider threats.
Asset Tracing & Recovery
Trace and seek recovery of crypto-enabled payments and fraudulent transfers of funds, as well as identify and recover misappropriated data.
EDUCATION
- Emory University School of Law (J.D., First Honors Graduate)
- University of California at Berkeley (B.S., Electrical Engineering and Computer Science)
BAR ADMISSIONS
- Washington, D.C.
- Georgia
