Michael Corcione

Michael Corcione is a cybersecurity, privacy and risk management professional with over 30 years of experience.

Michael has provided expert opinion for regulatory matters including the New York State Department of Financial Services (NYDFS) 23 NYCRR Part 500 Cybersecurity Examinations and for enforcement action for the Securities and Exchange Commission (SEC) regarding violations of Regulation Systems Compliance and Integrity (Reg SCI). He was the lead Reg SCI independent auditor working under SEC and Commodity Futures Trading Commission (CFTC) orders.

Early in Michael’s career he was a network engineer and systems analyst implementing corporate networks. He was also a product manager for a global financial services firm’s internet trading platform, and a trading firm’s algorithmic trading technologies. Prior to joining HKA, Michael was a managing director and led the Cybersecurity and Privacy Advisory Practices at Treliant, and Cordium Consulting, and was also a director at PricewaterhouseCoopers’s (PwC) where he led cybersecurity and privacy engagements as part of the Financial Crimes Unit.

Michael has led client engagements performing cybersecurity business and IT risk assessments, evaluating cyber threat identification, incident response readiness and testing, IT infrastructure implementations, regulatory compliance, vendor and third-party due diligence, and strategy. He has worked with clients from all verticals, including government contracting, financial services, asset management (including private equity), hedge funds, venture capital, real estate, construction, and insurance. Michael has overseen the cyber and information security program during the winddown and closing process of an Asian bank’s foreign branch office (FBO) in New York. This required full remediation and closure of outstanding Matters Requiring Attention (MRA) and Matters Requiring Immediate Attention (MRIA).

Michael is a member of the cybersecurity advisory board at Pace University, and a member of the board of trustees for the American Management Association International. He has published articles on cybersecurity and privacy for Engineering News Record, The Wall Street Journal, Finextra, Hedge Fund Manager, Global Investor, Waters Technology, Asset Services Times.