Justin Sherman is a consultant, scholar, author, and expert witness focused on cybersecurity and data privacy, technology policy, and geopolitics.
Justin Sherman is the founder and CEO of Global Cyber Strategies, a Washington, DC-based research and advisory firm providing risk, research, advisory, training and simulation-building, and expert witness services on cybersecurity, data privacy, tech policy, supply chain, and geopolitics to nonprofits, startups, Fortune 1000 companies, law firms, investors, and the US government.
Described by NPR as “the go-to guy on all things cybersecurity, data privacy, AI,” he is also an incoming adjunct professor at Georgetown University’s School of Foreign Service, the scholar in residence at the Electronic Privacy Information Center, a distinguished fellow at Georgetown Law’s Center on Privacy & Technology, and a nonresident senior fellow at the Atlantic Council. He is a contributing editor at Lawfare and writes a column for Barron’s. He co-hosts the Power On, Power Off podcast with Jenna Ruddock about technology, people, and power.
Justin is an advisor to privacy and security companies Cloaked and DeleteMe and on the advisory board of AI and policy company Manitou Research. He also serves on the Advisory Council of the Center for Democracy & Technology and as a pro-bono advisor to nonprofit, community-focused organizations.
He has consulted for and advised CEOs, government officials, investors, attorneys, product managers, communications strategists, and threat intelligence teams, including in volatile, complex, and high-risk scenarios — and has consulted on projects and programs for organizations ranging from HBO to DARPA. He provides expert witness and litigation consulting services on matters related to cybersecurity and data privacy, and his work has been cited by the FTC, FCC, CFPB, DOJ, CPPA, and other agencies.
Previously, he was an adjunct professor and senior fellow at Duke University, where he founded and ran its research program on data brokerage and taught on cybersecurity, data privacy, and technology policy. He worked at the Tech, Law, & Security Program at American University Washington College of Law, New America, and the Laboratory for Analytic Sciences, among others, and consulted for leading technology- and security-focused companies and nonprofits. He held fellowships at Stanford’s Starling Lab for Data Integrity, Duke Law’s Center on Law & Technology, and Stanford’s US-Russia Forum, where he participated in Track II dialogues with Russian counterparts on international security issues. He is sanctioned by the Russian government.
He is the author of the forthcoming book Navigating Technology and National Security, on the history and future of US national security regulations and review programs focused on technology. He has written dozens of papers and hundreds of articles on topics such as cybersecurity policy, data brokerage, data privacy, internet infrastructure and geopolitics, digital supply chain risk, national security reviews of technology, US-China tech policy, and Russian cyber, information, and technology strategy, policy, and operations — including for The Atlantic, Barron’s, The Daily Beast, Foreign Affairs, Foreign Policy, The Guardian, Slate Magazine, and The Washington Post. He previously wrote op-ed columns for Slate Magazine and WIRED.
He has testified multiple times to Congress; spoken at the White House, the United Nations, and NATO; and briefed White House officials, members of European Parliament, and many other policymakers around the world. He has appeared on BBC, CNBC, CNN, Deutsche Welle, Marketplace, NPR, PBS NewsHour, and SHOWTIME’s “VICE” and been quoted in Bloomberg, The Economist, Financial Times, Fortune, Los Angeles Times, The New York Times, Politico, Reuters, Rolling Stone, Slate, Teen Vogue, and The Washington Post. His work has been featured on HBO’s “Last Week Tonight with John Oliver.”
He earned his M.A. in Security Studies from Georgetown University and his B.S. in Computer Science and his B.A. in Political Science from Duke University.