David Sun

CISSP, CCE, EnCE, Partner, Cybersecurity & Digital Trust, Technology Risk, and Privacy – CohnReznick Advisory LLC

David Sun leads the security incident response and recovery services and computer forensic and litigation support services for the Cybersecurity practice. He develops comprehensive cloud security service offerings that provide clients with access to an end-to-end suite of cybersecurity, technology risk, and privacy services.

Experience and credentials

Has 25 years of cybersecurity and IT management experience responding to data breach and privacy incidents, internal employee malfeasance, and government agency investigations
Expertise in responding to cyber-attacks and resuming business operations; investigating email compromises, data breaches, and multi-million-dollar losses from wire fraud; performing forensic analysis, reconstruction, and post-breach remediation; and prosecuting departing employees for theft of sensitive information, destruction of documents, and unauthorized activities
As a leading industry consulting expert specializing in describing technology-related issues, David has served a testifying expert or court appointed expert on hundreds of litigation matters 
Provided expert testimony during a national federal investigation into the handling of classified information
Offered guidance during an investigation into destruction of public records by a sitting mayor of a major city
Provided security assessments for the United Nations and various United States Federal Reserve Banks
Assisted multiple state attorneys general investigate a variety of data privacy violations
Previous experience as the founder and president of a global litigation advisory firm that specialized in electronic evidence
Served as principal for a major accounting and advisory firm and as its national practice leader for cyber incident response and forensics
In prior role, David led a team of professionals responding to data breaches and ransomware attacks and conducting employee malfeasance and government agency investigations for both public and private sector clients, as well as providing a suite of proactive cybersecurity services to help mitigate the risk of a cyber-attack
Named to The Consulting Report’s The Top 25 Cybersecurity Consultants and Leaders of 2024 list and their Top 50 Cybersecurity Consultants and Leaders of 2023 list
Certified Computer Examiner (CCE)
Certified Information Systems Security Professional (CISSP)
EnCase Certified Examiner (EnCE)

Education

M.S., Electrical Engineering – Virginia Tech
B.S., Electrical Engineering – Virginia Tech

Professional affiliations

The International Society of Forensic Computer Examiners
The International Information Systems Security Certification Consortium (ISC2)
High Technology Crime Investigation Association (HTCIA)
International Association of Computer Investigative Specialists (IACIS)
INSIGHTS
Receive CohnReznick insights and event invitations on topics relevant to your business and role.
Subscribe

"CohnReznick" is the brand name under which CohnReznick LLP and CohnReznick Advisory LLC and their respective subsidiaries provide professional services. CohnReznick LLP and CohnReznick Advisory LLC (and their respective subsidiaries) practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. CohnReznick LLP is a licensed CPA firm that provides attest services to its clients. CohnReznick Advisory LLC provides tax and business consulting services to its clients. CohnReznick Advisory LLC and its subsidiaries are not licensed CPA firms.

member of nexia

CohnReznick is a member of Nexia, a leading, global network of independent accounting and consulting firms. Please see the “Member firm disclaimer (Opens a new window)” for further details.

© 2026 CohnReznick Advisory LLC, All Rights Reserved.