Not really. A specialist law firm can give you a risk assessment, give you an overview of all relevant regulations that you need to follow, recommend security f

Not really. A specialist law firm can give you a risk assessment, give you an overview of all relevant regulations that you need to follow, recommend security firms, connect you to any federal agencies that can help or need to know and all discussed in layman's terms (or at least exec-speak). If your CSO is good, then it's a second opinion. If he or she is not, then it's the only way to get the help you need.