Johnston, Rhode Island · Serving State & Federal Courts
"I work at the intersection of the boardroom, the crisis room, and the courtroom."
I help attorneys, corporations, and investigators make sense of complex digital evidence and cyber risk. From live incident response and cloud forensics to board-level crisis advisory and regulatory compliance, the work is clear, defensible, and built to hold up under scrutiny.
About
Richard Suls is the US Lead for Security Advisory Consulting at Reversec and the founder of Suls & Co., a boutique cybersecurity consultancy he has operated since 2009. With more than two decades of hands-on experience spanning financial services, critical infrastructure, healthcare, and government, he works at the intersection most practitioners never reach, advising CEOs, CISOs, and General Counsel on enterprise risk strategy while also serving as a court-qualified expert witness in state and federal proceedings.
Since being first qualified as an Expert Witness in 2007, Richard has brought the same discipline to the courtroom that he brings to every client engagement: precision, clarity, and accountability. He has provided forensic analysis and testimony in state and federal matters ranging from violent crime and financial fraud to divorce proceedings and destruction of digital evidence, translating technically complex evidence into language that holds up under cross-examination.
On the advisory side, his work is deliberately broad. Threats don't respect functional boundaries, and neither does his practice. He designs and facilitates executive crisis simulations, leads regulatory compliance programs aligned to NYDFS Part 500, NIST CSF, ISO 27001, DORA, NIS2, and the EU Cyber Resilience Act, and advises boards and leadership teams on the risk decisions that matter most, before and after an incident.
A frequent speaker at international security conferences including Disobey, BSides CT, BSides Denmark, and Teknologia, Richard brings practitioner depth to every engagement, whether that's testifying under oath, running a breach simulation for a board, or helping an organization build the security architecture it should have had before the call came in.
"The boardroom, the crisis room, and the courtroom. I've operated credibly in all three."
Two Practices. One Advisor.
Whether you're a Fortune 500 firm, a regulated financial institution, or a solo attorney with a complex matter, there's a path to working with me directly.
US Lead, Security Advisory Consulting
At Reversec, I lead the US security advisory practice for a global cybersecurity firm with deep roots in offensive security research. My engagements here serve enterprise clients across financial services, critical infrastructure, and technology, advising boards, CISOs, and General Counsel on risk strategy, regulatory compliance, and crisis readiness.
Work at this level spans executive tabletop design and facilitation, cyber maturity assessments, NYDFS Part 500 and CRI Cyber Profile compliance advisory, third-party risk program redesign, and enterprise incident response strategy. For complex, multi-stakeholder engagements that require the backing of a multinational firm, this is the right door.
Founder & Principal Consultant
Suls & Co. was founded on a simple premise: smaller organizations and independent legal matters deserve an advisor who will tell them the truth, prepare them for the worst, and stand beside them when it arrives.
This practice handles expert witness and forensic engagements, advisory work for SMBs and nonprofits, primarily in Southern New England, and select matters that benefit from an independent voice rather than a multinational firm. If you're an attorney, a small organization, or need litigation support, this is where to start.
Suls & Co. is a d/b/a of Curiosity Inked, LLC.
Practice Areas
Comprehensive advisory, investigation, multimedia enhancement, and expert testimony for legal and corporate clients.
Evidence acquisition and analysis wherever the data lives, from a seized laptop to a cloud tenant to a vehicle's onboard systems. Every domain is worked to the same evidentiary standard: sound acquisition, documented chain of custody, findings that survive cross-examination.
Incident Response
Cloud and enterprise breach response that contains the intrusion without destroying the record you will need afterward.
Most response work quietly destroys the record you will need later. Logs rotate. Systems get rebuilt. The attacker covers their tracks, and so, sometimes, does a rushed responder. I work the other way around.
Every step is taken to do two things at once: stop the intrusion and preserve exactly what happened. That means the same engagement that gets you back to business also produces evidence a court or a regulator will accept. From the exposed endpoint to the last exfiltrated record, the timeline is reconstructed, hashed, and documented so it does not fall apart under scrutiny.
Active Incident? Respond NowStandards & Frameworks
Deep, first-mover fluency across the compliance frameworks that matter most to regulated industries, U.S. and international.
Track Record
First qualified in Rhode Island Superior Court, with subsequent qualifications across State and Federal Courts.
First qualified as an Expert Witness in Rhode Island Superior Court, with subsequent qualifications in multiple State and Federal Courts. Extensive experience providing testimony in both state and federal cases.
Case types include murder, conspiracy, destruction of digital property, divorce proceedings, and white collar crimes including embezzlement.
Recognized for presentations to FBI InfraGard on advanced cybersecurity threats. Expert in video and audio forensics, voice identification, and multimedia evidence authentication. Skilled in demystifying technical evidence and e-discovery processes for legal professionals and corporate executives.
Extensive background in digital forensic acquisition, evidence preservation, and chain-of-custody standards that meet litigation-grade requirements across both civil and criminal matters.
Supported homicide and violent crime cases with mobile device forensics, video enhancement, and clear courtroom testimony.
Led forensic and e-discovery work in multi-million-dollar embezzlement and complex financial fraud investigations.
Preserved and analyzed digital evidence in contentious divorce and family law matters involving contested electronic communications.
Assisted counsel in conspiracy and organized crime cases with timeline reconstruction from phones, computers, and cloud platforms.
Investigated destruction and spoliation of digital evidence, providing defensible explanation of what was deleted and when.
Case details are anonymized to protect confidentiality. References available to qualified counsel upon request.
Conference & Training
Practical lessons from investigations, incident response, and expert witness work, shared with security, legal, and executive audiences internationally.
How digital forensics and ESI really work in litigation
Turning complex technical evidence into clear narratives for judges and juries
What incident response looks like from inside the investigation
Lessons learned from real-world multimedia (video/audio) evidence
Tabletop exercises and crisis preparedness for executives and boards
Regulatory complexity: NYDFS, DORA, NIS2, and the EU Cyber Resilience Act
LLM psychology, prompt injection patterns, and adversarial AI behavior
Press & Publications
Featured expertise across digital forensics, cybersecurity regulation, and crisis preparedness.
Regulatory requirements for crisis and tabletop exercises across U.S. and EU financial services, including NYDFS, DORA, and NIS2.
March 2026 Read Whitepaper →An in-depth look at NYDFS enforcement trends, compliance obligations, and what regulated financial institutions need to know.
October 2025 Read Whitepaper →An open RFC series for producing forensically defensible incident response records — the same evidentiary discipline applied in the courtroom, written into how IR work is documented from the first hour.
In Development · 2026Expert insights on digital forensics, multimedia evidence, and cybersecurity trends in one of America's leading news publications.
Read Article (PDF) →Expert commentary on virtualization security, digital evidence in virtual environments, and multimedia forensics.
Read Article (PDF) →Get in Touch
Available for consultation, investigation, incident response, multimedia analysis, and speaking engagements.