Law Firm Cybersecurity

It is often said that water takes the path of least resistance. This is equally true of hackers seeking to break into law firm computer systems. This chapter discusses methods and practices to frustrate these hackers. As part of the discussion, we outline the rationale for why the digital communications and client files of law firms constitute high-value targets to a wide range of diversely motivated actors, many of whom are armed with increasingly sophisticated technologies (as well as proven low-tech methods) for penetrating a firm’s systems. This chapter does not cover the specific forms of exposures (Trojans, denial-of-service attackers, etc.); instead, we focus on the best practices in preventing the hack. In doing so, we seek to provide context for the reality that law firms’ security chains are only as strong as their weakest internal and external links.