Ms. Amy Apostol is the Chief Legal Officer for the Intelligence and Security Academy, LLC, where she provides strategic consulting services with a special emphasis on legal, policy, and governance matters, and leads the company’s internal compliance and transactional activities.  In addition to her work in the private sector, she has experience in both the executive and legislative branches of the U.S. Government. Her federal career includes time spent at the U.S. Department of Defense, U.S. Office of Personnel Management, and the Government Accountability Office. 

She has worked on a number of high-profile federal court litigation matters with national security impacts and served on the management team at OPM that coordinated the incident response, notification, and remediation efforts following discovery of one of the most significant data breach events experienced by the U.S. Government.  Ms. Apostol also served as dedicated counsel for the National Background Investigations Bureau (now the Defense Counterintelligence Security Agency), helping to evolve the background investigation program through structural and operational changes. She provided support on many complex matters, including data privacy implications of the vast amounts of records held and the need to responsibly share them for business purposes.

At the Government Accountability Office, Ms. Apostol focused on oversight of technology, cybersecurity, privacy, and other related matters, including facial recognition technology, the legal framework related to drone activity, and internet protocol transitioning.  She contributed to the development of sustainable and prudent legislative activity, such as the establishment of a National Cyber Director in the National Defense Authorization Act for Fiscal Year 2021. 

Ms. Apostol also serves as an adjunct professor and curriculum advisor for Albany Law School’s Cybersecurity and Data Privacy program, where she was recently recognized as a Distinguished Teacher.  Her work has consistently required the expert ability to evaluate the legal efficacy of policies, standards, and work products related to core business functions, and to provide reliable assistance in identifying, developing, and implementing compliance and risk management strategies.