Regardless if you call it a fire-drill or a test, periodic validation and verification of your post-breach plan is a critical management step not to be missed.  Like all emergency planning, dusting off the planning document after the fire starts is a sure way to get burned.

What is our greatest security threat and what is easiest to fix?

To quote the parody in the Pogo comic, “We have met the enemy and he is us.”

It is well documented that a key risk within all organizations is our own people.  I’m not talking about intentional theft or destruction, but unintentional actions that result in outside hackers gaining access.  What can you do?  One of the easiest and most effective security activities you can do is awareness training.

Nobody wants to be the one to create a bad situation, but most of us aren’t aware of what we should or shouldn’t do, and what to do if we see a problem.  The worst thing to do is not report it to the IT team.  There are companies who know and effectively deliver this training, including those who work specifically with law firms and lawyers.  To be effective, security education should be reinforced yearly, and don’t forget new hires.

The above is only a primer on law firm cyber security and I hope that you will have more discussions with your CIO about improving your firm’s security posture.  Please include your vocal and visual support of these organizational changes that create a culture of security and improve your firm’s security posture.  Your active participation is vital.


Related Articles

Email Delivery

Get Our Latest Articles Delivered to your inbox +

Sign-up for email

Be the first to learn of Adam Smith, Esq. invitation-only events, surveys, and reports.

Get Our Latest Articles Delivered to Your Inbox

Like having coffee with Adam Smith, Esq. in the morning (coffee not included).

Oops, we need this information
Oops, we need this information
Oops, we need this information

Thanks and a hearty virtual handshake from the team at Adam Smith, Esq.; we’re glad you opted to hear from us.

What you can expect from us:

  • an email whenever we publish a new article;
  • respect and affection for our loyal readers. This means we’ll exercise the strictest discretion with your contact info; we will never release it outside our firm under any circumstances, not for love and not for money. And we ourselves will email you about a new article and only about a new article.

Welcome onboard! If you like what you read, tell your friends, and if you don’t, tell us.

PS: You know where to find us so we invite you to make this a two-way conversation; if you have an idea or suggestion for something you’d like us to discuss, drop it in our inbox. No promises that we’ll write about it, but we will faithfully promise to read your thoughts carefully.