Subscribe

  • How Can We Help You?

    Global Problem Solving from Covington: Deal with Complex Problems Anywhere in the World

Surdu_Steve_1000x714_ENV

Steve Surdu

Senior Advisor

Washington +1 202 662 5737

  • About
  • Representative Matters
  • Credentials
  • About

    Steve Surdu, a non-lawyer, has more than thirty years of experience in information technology consulting. He assists clients in a variety of computer security areas such as assessing security threats, priorities, and capabilities. He provides information security subject matter expertise to clients so they can use that information to better position their products or deliver their own services.

    Steve has investigated site defacements, personally identifiable information thefts, ACH account fraud, payment card thefts, ATM cash drawdowns and intellectual property thefts. This work gave Steve extensive experience in responding to large-scale computer security breaches. He also developed a thorough understanding of various threats – especially organized crime and state sponsored groups.

    Steve has worked with clients in many industries including financial services, high technology, healthcare, regulated industry, manufacturing, hospitality, energy, state/federal government, and retail. Over the course of his career he has performed large-scale application development, third-party software system integration, information security consulting and general business consulting.

    Areas of Expertise

  • Practices and Industries
  • Representative Matters
    • Provided onsite and remote incident response investigative support to clients involved with breach situations. The assistance has been wide-ranging and includes activities such as performing detailed analysis tasks within the technical response teams, critiquing the quality of the support provided by incident response teams, developing investigative approaches, designing remediation plans, enhancing status reporting structure/content and providing quality assurance on deliverables produced by the technical teams.
    • Supported CFIUS matters in a variety of ways including: evaluating the technical security posture of organizations, critiquing their approaches for isolating sensitive information from unauthorized entities and evaluating the technical capabilities/governance of the entities involved in the transaction.
    • Worked with clients to develop evidence preservation approaches that would be both responsive to government requests while minimizing the technical and administrative burden on the client.
    • Determined the existence and availability of non-public intelligence available to support specific litigation strategies.
    • Supported clients with a variety of technical issues such as: identifying non-US incident response practitioner licensing requirements, providing input on the quality of potential security outsourcers, comparing/contrasting competing security products and educating staff on the merits/challenges of various security approaches.

    Areas of Expertise

  • Credentials
    Education
    • University of Michigan, Stephen M. Ross School of Business, B.B.A., 1980
    Previous Experience
    • Mandiant, Vice President of Professional Services

    Areas of Expertise

News and Insights

Events