Gary Corn
Director, Techology, Law, and Security and Adjunct Professor of Cyber and National Security Law
Gary Corn
Director, Techology, Law, and Security and Adjunct Professor of Cyber and National Security Law
Gary Corn
Director, Techology, Law, and Security and Adjunct Professor of Cyber and National Security Law
General Biography
Gary Corn is a recognized expert on the intersection of cyber and other emerging technologies with national security law and policy. He is a retired U.S. Army colonel, having served over twenty-six years on active duty as a military attorney practicing national security law at the highest levels within the Department of Defense. His final five years he served as the General Counsel to U.S. Cyber Command.
Presently, Corn is the director of the Technology, Law & Security Program and an adjunct professor of cyber and national security law and the law of armed conflict at the American University Washington College of Law. He is a frequent, and highly-sought out speaker at international and national conferences and has published numerous articles, book chapters, and blog posts, including in the American Journal of International Law, The Temple International and Comparative Law Journal, the Texas International Law Journal, the Vanderbilt Journal of Transnational Law, on Lawfare, Just Security, and the Lieber Institute’s Articles of War. He has contributed chapters to several Oxford University Press books and is a co-author of National Security Law and the Constitution (Wolters Kluwer)(2020).
During his military career, Corn served in various positions at the brigade, division, and corps level, including multiple times as a military prosecutor, civil litigator, and operational law attorney. His assignments include serving as a Deputy Legal Counsel to the Chairman of the Joint Chiefs of Staff, the Operational Law Branch Chief in the Office of the Judge Advocate General of the Army, the General Counsel to U.S. Army South, a Special Assistant United States Attorney in the District of Columbia, and on deployment as the Chief of International Law for Combined Forces Command in Afghanistan.
Corn received a JD from the George Washington University, a BA in International Relations from Bucknell University, an LLM from the U.S. Army Judge Advocate General’s Legal Center and School, and an MA in National Security Studies from the United States Army War College. He is also a graduate of the Command and General Staff College of the Brazilian Army. He is a member of the ABA Standing Committee on Law & National Security, a member of the editorial board of the Georgetown Journal of National Security Law and Policy, an Advisory Board Director for the Cyber Security Forum Initiative, a Senior Fellow at the Lieber Institute for Law & Land Warfare, an advisor to the International Code of Conduct Association, and a former Senior Fellow in Cybersecurity and Emerging Threats at the R Street Institute, and with the Army Cyber Institute.
Practice Areas
Cyber Insurance
- Leveraged extensive experience in national security law and defense to provide nuanced legal insights and strategic guidance on complex insurance cases involving government and military sectors.
- Applied deep understanding of international law and cybersecurity in advising on insurance matters related to data breaches, cyber threats, and cross-border legal implications in a digital landscape.
- Demonstrated advanced analytical abilities and a problem-solving mindset in various senior roles, including as a Department of Defense consultant, aiding in the resolution of intricate insurance disputes involving multifaceted legal and regulatory challenges.
Cyber Warfare Consulting & Policy
- Provide strategic consulting services on cyber, intelligence, and international law for various entities within the Department of Defense.
- Conducted policy research and outreach with a team of nationally recognized leaders on strategic national and cyber security law and cyber warfare policy issues.
- Served as the legal advisor to the four-star commander and staff of the DOD’s strategic command responsible for all military cyber operations.
- Advised the Chairman of the Joint Chiefs of Staff and DoD senior leaders on strategic national security and operational legal and policy matters.
- Provided legal and policy advice on combatant detention matters, rule of law development, compliance with international humanitarian and human rights law.
- Served as the single point of liaison to the ICRC and other non-governmental organizations.
- Assisted the Government of Afghanistan with the development of legal institutions and policies for conducting lawful combatant detention operations.
- Developed policies and strategies at the Department of Defense focusing on the intersection of cybersecurity and human rights, particularly in the realm of digital privacy and information security.
Cyber Warfare Training
- Consulted on course content and development for an in-depth, classified training course on national security and intelligence matters, and provided instruction on cyber and information conflict for University of Maryland, Applied Research Laboratory for Intelligence and Security
- Lead a growing team of national experts in the establishment of an innovative new Technology, Law, & Security (TLS) Program at one of the nation’s top law schools.
- Provide strategic consulting services and tailored training and education on national security and cybersecurity legal and policy matters.
- Advised on legal and policy research, operations, curriculum development, and provided instruction on cyber law and policy to the US Army’s premier center for interdisciplinary cyber research, advice and education.
Expert Witness Testimony & Consulting
- Testified and consulted in a cyber security property insurance breach of contract dispute arising from damages related to NotPetya, a cyber event on the grounds of a war exclusion clause. Mondelez International, Inc. vs. Zurich American Insurance Company (2018)
- Testified as an expert witness in a cyber insurance breach of contract claim for denying coverage for damages related to NotPetya cyber event on the grounds of a war exclusion clause. Merck & Co., Inc., et al. v. ACE American Ins. Co., et al. (2018)
- Provided expert consulting advice on catastrophic risk manangement and cyber insurance policy exclusion language for AXA Group.
- Delivered expert consulting and training support services for Department of Defense cyber-related security cooperation and foreign partner capacity building for FARO International
- Provided expert consulting services to various Department of Defense foreign partner in a legal capacity around building cyber security programs.
- Advised on classified government contract for an aerospace corporation.
Human Rights
- Advised on human rights issues in military operations, ensuring compliance with international human rights standards and laws.
- Guided future legal professionals in understanding and applying human rights principles within national and international legal frameworks.
International Law
- Extensive engagement in international legal discourse and collaboration on cybersecurity, leveraging fluency in Spanish and Portuguese, and experience in international law, to foster global cooperation and develop strategies addressing the complexities of cybersecurity and conflict.
- Engaged with the most senior agency attorneys at the DOD, White House, CIA, Dept’s of State, Justice, Homeland Security, and the FBI, as well as with Congress and foreign partners on cyber law and policy.
- Provided strategic legal and policy advice to the Judge Advocate General of the Army and senior Army leaders on the Army’s worldwide operations, including on national security law and law of armed conflict.
- Provided legal and policy advice on all operational and international law matters, including law of war, rules of engagement (ROE), presidential powers, force deployments, status of forces agreements, intelligence law and oversight, information operations, counter terrorism, cyber operations, and special access programs for the Office of the Chairman of the Joint Chiefs of Staff.
- Developed, planned, and executed Theater Security Cooperation legal engagement in Central and South America and engaged with senior military and national security officials for the United States Army South.
- Provided legal advice on international cyber operations, focusing on compliance with international law and bilateral agreements, thereby enhancing cross-border collaboration in combating cyber threats.
- Advised the senior U.S. commander in Afghanistan during Operation Enduring Freedom on strategic international and operational law matters.
National Security
- Offered strategic legal counsel in national security matters, incorporating international law to inform high-level decision-making in the U.S. Army and Department of Defense, showcasing an ability to navigate legal intricacies in a global context.
- Extensive experience in national security law, including cyber operations and cybersecurity, gained through senior roles in the U.S. Army and Department of Defense, showcasing adeptness in legal and policy aspects of cyber conflict and war
- As a Senior Officer in the U.S. Army’s Judge Advocate General’s Corps, led complex legal operations in national security and international law, demonstrating expertise in advising on legal and policy matters critical to defense and security.
- As a Department of Defense consultant and military legal expert, guided strategic initiatives involving technology law and digital forensics, enhancing national defense capabilities through innovative legal frameworks.
Professional Credentials
Memberships
- Bar of the Supreme Court of Maryland, 1993
- United States Supreme Court, 2002
- Court of Appeals for the District of Columbia Circuit, 2003
- Security Clearance: Top Secret/SCI
Selected Books and Publications1
- Corn & E. Talbot Jensen, “Attacking” Big Data: Strategic Competition, the Race for AI, and the International Law of Cyber Sabotage, in Big Data and Armed Conflict: Legal Issues Above and Below the Armed Conflict Threshold, Oxford University Press (2023).
- Corn & E. Goldman, Defend Forward and Persistent Engagement, in The United States’ Defend Forward Cyber Strategy: A Comprehensive Legal Assessment, Oxford University Press (2022).
- Corn & P. Renals, Scenarios for Defend Forward, in The United States’ Defend Forward Cyber Strategy: A Comprehensive Legal Assessment, Oxford University Press (2022).
- Corn, Covert Deception, Strategic Fraud, and the Rule of Prohibited Intervention, in The United States’ Defend Forward Cyber Strategy: A Comprehensive Legal Assessment, Oxford University Press (2022).
- Corn & G. Corn, Putin’s terror state and the not so new world order, Center for Ethics and the Rule of Law, University of Pennsylvania (April 2022).
- Corn, Ukraine Symposium – The Law of Crowdsourced War: Democratized Supply Chains – Part I, Lieber Institute, West Point (March 2023).
- Corn, Ukraine Symposium – The Law of Crowdsourced War: Democratized Supply Chains – Part II, Lieber Institute, West Point (March 2023).
- Corn, Ukraine Symposium – The Ukraine Conflict, Smart Phones, and the LOAC of Takings, Lieber Institute, West Point (April 2022).
- Corn, Cyber Conflict: From Apathy to Action, American Bar Association (January 2023).
- Corn, The Fog of War, Civilian Resistance, and the Soft Underbelly of Unprivileged Belligerency, Lieber Institute, West Point (March 2022).
Background and Education
- A. Strategic Studies, The Army War College, 2014 (Distinguished Graduate).
- Escola De Comando E Estado Maior Do Exército, (Brazilian Command and General Staff College), 2005.
- L.M. Military and International Law, The Judge Advocate General’s School, 2002 (Honors).
- D., The George Washington University National Law Center, 1993 (Honors).
- A. International Relations, Bucknell University, 1987 (Cum Laude).
- Fluent in Spanish and Portuguese
Financial Services Company, Chief Risk Officer:
Law & Forensics’ guidance in board-level consulting has been transformative for our organization. Their expertise in integrating cybersecurity into our business strategy has not only enhanced our risk management but also improved our overall governance approach. Their team’s ability to explain complex cyber issues in a comprehensible manner has been invaluable.
Technology Startup, CEO:
The strategic advice from Law & Forensics on cybersecurity governance has been pivotal for our executive decision-making. Their team’s insights into emerging cyber threats and regulatory changes have helped us stay ahead of potential risks. Their contribution to our digital transformation journey has been outstanding.
Law Firm, Partner:
Law & Forensics’ digital forensics team played a crucial role in a high-stakes litigation case for us. Their detailed analysis and clear presentation of digital evidence were key in our success. Their professionalism and thoroughness set them apart.
Retail Corporation, Director of IT Security:
We turned to Law & Forensics for a complex internal investigation involving cybercrime. Their cutting-edge forensic techniques and meticulous attention to detail were impressive. The comprehensive forensic reports provided were critical in resolving our security issues.
Healthcare Organization, Chief Information Security Officer:
The cybersecurity audit and risk assessment provided by Law & Forensics were incredibly thorough. They helped us identify and address several critical vulnerabilities. Their recommendations have significantly enhanced our security posture.
Manufacturing Company, IT Manager:
Law & Forensics delivered an extensive cybersecurity assessment for our organization, aligning perfectly with industry standards. Their actionable insights have been instrumental in improving our cybersecurity defenses and compliance.
Law Firm, Senior Litigator:
In a complex cybersecurity legal case, the expert witness testimony provided by Law & Forensics was pivotal. Their ability to simplify technical evidence for the court was remarkable and influenced the case’s outcome positively.
Corporate Legal Department, General Counsel:
The expert testimony from Law & Forensics in a digital forensics dispute was invaluable. Their clear, concise, and unbiased presentation helped immensely in clarifying the technical aspects of the case for the jury.
Legal Services Provider, Head of Litigation Support:
Law & Forensics’ expertise in eDiscovery was evident in their handling of a large-scale project for us. Their strategic guidance on data management and technological solutions greatly enhanced our process efficiency and compliance.
Financial Institution, Director of Compliance:
The eDiscovery strategies developed by Law & Forensics were game-changers for our regulatory inquiries. Their ability to manage large volumes of data efficiently while reducing costs was exactly what we needed.
Telecommunications Company, Director of Cybersecurity:
During a major cybersecurity incident, Law & Forensics’ incident response team was exceptional. Their swift and effective management minimized the impact and expedited our recovery process.
Educational Institution, IT Security Head:
Law & Forensics provided expert leadership and coordination during a critical breach at our institution. Their tailored incident response plan and ability to work with various stakeholders were crucial in restoring our operations quickly.
Lectures and Presentations:
- Corn, AI Mistakes and Failures on the Battlefield: Operational and Legal Implications, Stockton Center for International Law, Naval War College (December 2023).
- Corn, International Law, Cyber Norms, and Military Cyber Stability, International Conference on Cyber Norms 8.0: Strategies for Cooperation and Conflict in a Turbulent International System, MIT (November 2023).
- Corn, Private Warriors –Emerging Technologies and the Democratization of Warfare, ABA 33rd Annual Review of the Field of National Security Law Conference (November 2023).
- Corn, Responses to Malicious Cyber Operations–Countermeasures, Necessity, Self-defence, Oxford Process on International Law Protections in Cyberspace, Yale (October 2023).
- Corn, Securing Nations: Practitioner Perspectives on Cyber Warfare, 11th Annual Cyber Warfare Symposium, Journal of Law & Cyber Warfare (October 2023).
- Corn, Distinction and Discrimination under International Humanitarian Law and Military Applications of Artificial Intelligence (AI): Requirements, Risks, and Red Lines, DILEMA Pre-Conference Expert Meeting, Asser Institute (October 2023).
- Corn, Civilian Involvement in Cyber and Other Digital Operations—Current Trends, Expert Meeting on International Humanitarian Law and the Growing Involvement of Civilians in Cyber and Other Digital Operations during Armed Conflicts, International Committee of the Red Cross & Geneva Academy (September 2023).
- Corn, Cyber “Attack”—Towards Greater Precision, 2nd Annual Symposium on Cyber and Int’l Law—Cyber in War: Lessons from the Russia Ukraine War, Washington College of Law (June 2023).
- Corn, Cyberspace4All Project, Roundtable on Applying the Plea of Necessity to Cyber Operations, Chatham House (September 2023).
- Corn, ABA & Nonproliferation Policy Education Center, The Law of Armed Conflict & Attacks on Nuclear Power Plants (June 2023).
- Corn, Human Rights in Armed Conflict, XIIIth Seminar for Legal Advisors of the Armed Forces, Int’l Society for Military Law and the Law of War, West Point (June 2023).
- Corn, Security in an Insecure World: National Security, Technology, and the Law, ABA/Mayer Brown/Washington College of Law (May 2023).
- Corn, Applying the Procedural and Substantive Requirements of Countermeasures in Cyberspace, Cyberspace4All Project, Roundtable on Countermeasures in Cyberspace, Chatham House (May 2023)
- Corn, Defend Forward and Active Defense, Yale Cyber Leadership Forum (March 2023).
- Corn, Cyber Operations Technical Foundations Course, Army Cyber Institute, West Point (March 2023).