Stephen Ramey

Headshot

EY

Global Incident Coordinator Lead for DFIR

Stephen leads the Global Incident Coordination for DFIR at EY and brings over 13 years of experience responding to and leading data breach, digital forensics and electronic discovery (“eDiscovery”) investigations. Stephen has advised clients during Anti-Trust matters involving HSR 2nd requests and Civil Investigative Demands, breach of contract, Internal Investigations and Intellectual Property theft disputes.

Prior to EY, Stephen’s previous roles include interim Digital Forensics practice leader, Partner of Digital Forensics and Strategy, and Digital Forensics and Incident Response Team Lead. Stephen led the digital forensics for one of the United States largest litigations. He was responsible for overseeing the data collection efforts across multiple jurisdictions, scheduling teams to support 24 hours by 7 days a week operations and being a trusted advisor to his client on all aspects of data collection and analysis.
Stephen was also responsible for co-developing an incident response assessment program which was based on the NIST SP800-61 Rev 2 framework, building several digital forensics laboratories, and overseeing the daily operations of a national digital forensics practice. He has advised numerous clients in the S&P 500 across the Energy, Technology, Healthcare, and Financial Services Industries.

He has previously held GIAC Certified Forensic Analyst (GCFA) and the EnCase Certified Examiner (EnCE) certifications.  He has received extensive training in information security, data recovery, evidence handling and digital investigations.