FTI Consulting, Cybersecurity and Data Privacy Communications

Additional Info

Company size (employees)500 to 999
Headquarters RegionNorth America


FTI Consulting’s Cybersecurity and Data Privacy Communications practice is one of the only specialized cybersecurity communications groups in the industry. The practice provides expert crisis communications counsel and support throughout the entire lifecycle of a cyber incident, helping companies mitigate risks and preserve their reputation before, during and after the incident. The practice leverages first-hand experience having worked on hundreds of cybersecurity matters spanning preparedness, incident response, litigation support and reputation recovery across a wide variety of industries.

Specifically, the Cybersecurity and Data Privacy Communications team provides strategic crisis management counsel and support on highly scrutinized cyber and data privacy incidents, including those linked to AG investigations, class action litigation, congressional inquiries, investigative reporting or other foreign government investigations and involving major operational disruptions and legal notification processes. The team has handled incidents involving PII, IP, PHI, and has successfully navigated business email compromise, phishing and spear phishing, DDoS, credential stuffing, vendor compromise, critical infrastructure and nation-state and double-extortion ransomware attacks. The breadth of experience and multidisciplinary approach on these matters has positioned the practice as a well-respected and influential advisor in the cybersecurity and communications space alongside seasoned forensic investigators, cyber insurers and legal counsel.

The team consists of former intelligence agency officials, corporate communications leaders, journalists, attorneys, government spokespersons and Congressional investigators who have advised on or managed high-profile data security and privacy incidents. The team’s diverse background and scope of expertise allow it to provide clients, including Fortune 500 companies and other multinationals across sectors and geographies, with unique and effective solutions.

How we are different

- FTI’s Cybersecurity and Data Privacy Communications team takes a multi-stakeholder approach to preparedness, incident response, litigation support and reputation rebuild. The team closely partners with external counsel, forensic advisors, cybersecurity insurance partners and internal client teams to ensure consistent and accurate stakeholder communications, developing tailored outreach strategies to shape narratives and guide communications with key stakeholders including customers, employees, investors, regulators, the press, among others. Additionally, having worked on a diverse array of cybersecurity incidents, the team is well versed in the operations and behaviors of the preeminent threat actor groups and malware/ransomware strains – allowing it to effectively prepare clients for data releases, add-on threats, among other activity.

- The Cybersecurity and Data Privacy Communications practice is one of the leading practices of its kind. Commentary from the practice’s leaders is often featured in industry trade news and thought leadership. Meredith Griffanti and Evan Roberts, co-heads of the practice, have spoken on several cybersecurity panels, including Incident Response Forum Ransomware, the WSJ Pro Cybersecurity Executive Forum, National Cybersecurity Center and Google’s “Cybersecurity for State Leaders Training,” U.S. Nuclear Regulatory Commission’s HACK Event, among many others.

- The team has advised clients through approximately 80 cyber matters – including some of the most prominent attacks that made global headlines – in 2021. The team has also secured inclusion on several high-profile cybersecurity insurance panels and has a presence on many of the premiere panels in the field. In addition, the team has cultivated relationships with the top legal and forensic firms in the industry, leading to key referral opportunities to partner on the most high-profile incidents globally.