Paul Ferrillo
Counsel with Weil, Gotshal & Manges LLP

Paul Ferrillo is counsel in Weil’s Litigation Department, where he focuses on complex securities and business litigation, and internal investigations. He also is part of Weil’s Cybersecurity, Data Privacy & Information Management practice, where he focuses primarily on cybersecurity corporate governance issues, and assists clients with governance, disclosure, and regulatory matters relating to their cybersecurity postures and the regulatory requirements which govern them.

Mr. Ferrillo has substantial experience in the representation of public companies and their directors and officers in shareholder class and derivative actions, as well as in internal investigations. In particular, Mr. Ferrillo has coordinated numerous internal investigations on behalf of audit committees and special committees, and handled the defense of several significant securities class actions alleging accounting irregularities and/or financial fraud.

He also has extensive experience in the area of directors’ and officers’ liability insurance issues by virtue of his prior employment with American International Group (AIG), in its major U.S. underwriting subsidiary, National Union Fire Insurance Company of Pittsburgh, Pa. (the largest writer of D&O insurance in the U.S.), where he held numerous senior-level positions in its claims and underwriting areas. He is recognized nationally as a leader on D&O insurance issues, and frequently counsels public companies and their boards of directors on a vast array of issues relating to the nature, extent, types and availability of all D&O and Management Liability Insurance-related products, as well as on indemnification and advancement issues. He also frequently counsels private equity funds and hedge funds on issues relating to their own distinct D&O insurance needs, and the D&O needs of their portfolio companies. Drawing on this distinctive experience, Mr. Ferrillo provides specialized counseling to clients concerning the actual interplay of their D&O coverage in the class action litigation, mediation and settlement process.

Mr. Ferrillo also regularly counsels clients in the growing field of cybersecurity corporate governance, which is an increasingly important part of a Board’s enterprise risk management function. He counsels clients on cyber governance best practices (using as a base the National Institute of Standards cyber security framework, which was announced on February 14, 2014), third-party vendor due diligence issues, cybersecurity regulatory compliance issues for Private Equity, Hedge Funds, and Financial Institutions that have been promulgated by the SEC, FINRA, the FTC, and the FDIC/OCC, the preparation and practicing of cyber security incident response plans, as well as evaluating and procuring cyber liability insurance to protect against losses suffered by Companies as a result the theft of consumer or personally identifiable information, or as a result of the destruction of servers and corporate infrastructure.