With the frequency of data breaches and cyber incidents increasing, keeping you law firm’s computer systems up-to-date and applying the best cyber procedures is no longer just something you need to do to protect the firm’s assets, it is likely an ethical issue as well. A recent ABA article outlines basic steps that need to be taken by all law firms:
1. Backups—Basic data processing 101, offsite daily encrypted backups are a must.
2. Password—Complex passwords is a basic standard. Using ‘Password’ for instance for your password does not cut it.
3. Patches & Updates—Certainly Equifax wishes that had followed this advice.
4. Encryption—All data or devices with data that leaves your office need to be encrypted.
5. Security Awareness Training—Keep your staff up-to-date on cyber trends and security
6. Technical Solutions—Use technology to spot suspicious links and software
Lastly, even with all of the above steps taken prevention may not be enough. Making sure that you have protected your assets with a properly endorsed cyber insurance policy is an essential. Many of the ‘add-on’ policies that are part of your business owners or professional liability policy may provide some protection, but it may be inadequate in the size of the limits or the breadth of coverage to meet your firm’s needs.
Click ABA Cyber to read the entire article.