Ion Analytics featured Micaela McMurrough as part of a series of Q&As profiling outstanding women in various practice areas to mark International Women’s Day. Micaela discusses her experience in the cybersecurity field and the lessons she has learned during her legal career.
Micaela addresses the role of AI in cybersecurity compliance, stating “there are many ways that companies are leveraging these tools in compliance efforts. Some are using AI to improve their cyber defenses and privacy programs, including by deploying AI for threat detection, vulnerability management or enhanced authentication. I also see companies using AI (or exploring the use of AI) in compliance and governance efforts. The tools can review processes and suggest enhancements based on knowledge of compliance requirements or other available information. They can also review governance or risk management policies and procedures in order to identify ways to streamline, deduplicate or deconflict items across a governance program. In short, there are many ways these tools can play a role in compliance efforts, especially when guided and supervised by smart humans.”
She also notes that “the number of women in leadership in compliance positions is certainly on the rise from when I started my legal career, but there’s still room for improvement. That said, I’m encouraged by the number of junior women in the pipeline for these roles. I’m also encouraged by the number of women interested in tech roles. Across the board, there’s a need for more tech-savvy professionals to manage tech risk, and I’d love to see more junior women lean into their tech interests and become experts on the capabilities and limitations of available tools. The technology and regulatory landscapes are constantly evolving and, as a result, I expect to see more opportunity for senior compliance roles related to tech in the coming years. Set yourself apart by immersing yourself in the technology now so that you’re an expert on capabilities and limitations when your number is called.”
Reflecting on her first leadership role on a cyber matter, Micaela shares with Ion Analytics, “soon after joining Covington, and before I was a partner, I was paired with David Fagan, one of the chairs of our cyber practice, to conduct a cyber incident response. It was an existential crisis for our client, who had experienced serious operational impact, and involved a lot of interaction with C-suite professionals. While David kicked off the engagement, he soon let me take the lead on client calls after demonstrating that I was ready for this responsibility. He was always there and able to jump in if needed, but, after a certain point, I became the main point of contact for the client. Along the way, I was able to hone my own skills and instincts, including to understand the types of questions that are top of mind for C-suite executives in these situations. Importantly, David always made sure I was supported on the calls, instilling confidence and security. As I mentor lawyers early on in their careers now, I follow his example and allow them to take the driver’s seat once I feel they are ready for the task. Like David once was for me, I’m always there in the background as a safety net for them, too.”