Grant Duncan is a managing director in the Cyber Risk practice of Kroll, based in the New York office. Grant helps clients understand data breach response and the complexities that arise when notifying large populations of individuals, both before and after an event occurs. He has worked on some of the largest data breach events.

Prior to joining Kroll in 2012, Grant worked in varying positions within the information technology industry, including as a web developer and advising the small and medium-sized business market on cloud computing implementation.

Professional Experience
  • Data Breach Response
    Grant has helped thousands of clients in their data breach response efforts, ranging in size from small to millions of impacted individuals, across many industries.
  • Data Breach Preparedness
    Grant works with clients before they have an incident to understand process and procedures around data breach response.

Education and Certifications 
  • M.S., Computer and Information Systems Security/Information Assurance, Boston University
  • B.S., Business Administration, American University Kogod School of Business
  • Certified Information Privacy Professional (CIPP)

Affiliations and Memberships
  • International Association of Privacy Professionals (IAPP)
  • Professional Liability Underwriting Society (PLUS)
  • InfraGard

  • Spanish – Fluent
Duncan /en/our-team/grant-duncan /-/media/kroll/images/headshots/directors/grant-duncan.jpg people {E39587AD-8F0B-4FE2-865F-969BC5501096} {CE589BFE-43ED-4214-8CBC-A96989570B0F} {8903C3EC-FC8E-4E8A-881A-88983B313D3A} {2DEEE4D2-8278-4C50-B3FF-1563BB257804}

Other Areas We Can Help

Cyber Risk

Cyber Risk

Global, end-to-end cyber risk solutions.

Cyber Risk
COVID-19 Medical Supplies: How to Mitigate Fraud Risks

Pharmaceutical Recall Notifications

Kroll's expertise handling large-scale notifications for highly regulated industries helps you increase efficiencies and meet regulatory requirements.

Pharmaceutical Recall Notifications



Initial Access Brokers: Fueling the Ransomware Threat  - The Monitor, Issue 17


The Importance of Jurisdictional Risk When Doing Business with Money Services Businesses


Data Exfiltration in Ransomware Attacks: Digital Forensics Primer for Lawyers