Cybersecurity, Data Privacy, & Digital Risk Expert

Specialties & Experience of this Expert Witness

Additional Information

Luke Tenery is a Partner with StoneTurn who brings over 20 years of experience helping leading organizations mitigate complex cybersecurity, data privacy, and digital risks. He applies deep expertise in cyber investigations, threat intelligence, incident response, and information risk management to guide clients from prevention and detection through mitigation, remediation, and transformation. Luke specializes in situational cyber risk. He helps organizations across many industries align information security risk management with high-impact initiatives—incident remediation, M&A due diligence and integration, cyber cost analyses, digital transformation, and threat intelligence program development. He regularly advises public companies and their boards on digital risk and the remediation of complex cyber incidents, and has performed interim leadership (including interim CISO) functions for clients. Representative matters include: directing compliance-remediation validation for a global cryptocurrency exchange under an NYDFS Part 500 consent order and providing interim CISO services; leading a digital-forensics investigation into the theft of cryptocurrency from a financial-services firm's digital-asset storage; directing the investigation and incident response to a U.S. SEC inquiry involving attacker access to material non-public information; investigating unauthorized access to the email systems of a sovereign entity's third-party provider and of a major political donor, including attacker attribution to support litigation; and leading a compromise investigation into a multinational Asian bank's operations with anti-money-laundering implications. Before StoneTurn, Luke founded the global cyber practice and led the cyber response, investigations, and intelligence practice of an international consulting firm (Ankura), and earlier rose to Deputy Cyber Practice Leader over a 15-year tenure at Kroll. He is a frequent author and speaker on cybersecurity, having published with outlets including Law.com, Law360, Dark Reading, and Bloomberg Law and presented at forums such as the Securities Enforcement Forum and Incident Response Forum. Education: MBA, Kellogg School of Management, Northwestern University; Certified Chief Information Security Officer (C/CISO), Carnegie Mellon University; B.S., Information Systems Management, David Lipscomb University. Certifications: CISSP, CISM, GPEN, C/CISO.