John deCraen
Senior Director
Quick facts
22+ years of experience
Specializes in computer forensics, cybersecurity and IT risk and compliance
Focuses on global corporations and comprehensive multi-regulation governance
Has served as an expert witness, university guest lecturer and public speaker
Contact info
Download PDF  |  V-Card
+1 214 438 1095
Connect on
John deCraen is a Senior Director with Alvarez & Marsal’s Disputes & Investigations Global Cyber Risk Services practice in Dallas.

Mr. deCraen specializes in computer forensics, cybersecurity and IT risk and compliance assessment matters performing various management, investigatory and analytical assignments for dozens of globally located clients in a multitude of industries.

His areas of emphasis are complex and enterprise-class corporate networks and collaboration with executive and C-suite company officers on intensive engagements that heavily focus on IT risk management and compliance including systems design and policy maturity programs, cybersecurity program building, large and disparate data-set acquisition and forensic analytics.

Prior to joining A&M, Mr. deCraen served as the Director of IT Infrastructure Operations for an auto finance firm that managed a $17 billion loan portfolio. After military service, Mr. deCraen began his Information Technology career moving through various technical roles graduating to middle and ultimately senior management. The entirety of Mr. deCraen’s industry experience was with Fortune 100 companies that specialized in consumer financial services.

He has extensive experience in the strategy and design of complex computing environments that include: infrastructure design, entitlement programs, policy development, standards implementation and risk management frameworks. He is particularly strong in the area of cyber risk assessment having assisted multiple clients in determining their alignment with NY-DFS, HIPAA/HiTrust, DFARS, GDPR, FFIEC and a range of maturity and risk models. Developed and conducted successful cybersecurity examinations of the world’s largest oil and natural gas provider, the world’s largest health insurer and a FTSE 5 manufacturer.

He has worked for clients in a wide range of industries and has specialized in large multi-national banking institutions but including higher education, governmental organizations, energy, healthcare, manufacturing and telecommunications. Additionally, he has worked with many international law firms in a number of international locales that include Europe and the Middle East.
He designed the systems and developed the processes that are still employed in the eDiscovery management and big-data analytics functions for the world’s first and second largest bankruptcies. These systems were built to accommodate more than 125 legal cases and were governed by a multitude of regulatory requirements. The data systems included in this work stored and processed many hundreds of terabytes of data, billions of emails and a dozen disparate database types.

Mr. deCraen served numerous times as an expert witness in the fields of computer forensics in both Federal and State courts and was called upon many additional times to communicate with the court through written deposition, affidavit and declaration.

He provides extensive public speaking engagements such as a Masters in Risk guest lecturer at the University of Colorado. He has spoken as featured cybersecurity presenter at the HiTrust annual security conference, the Relativity eDiscovery conference as well as the NYU Stern Masters in Risk cybersecurity panel series. He provides specific industry cybersecurity presentations to State level organizations such as the California Hospital Association and the Water & Environmental Association of Texas. He is a member of the cybersecurity advisory board for the Southern Methodist University in Dallas.