Bookmark this page on your mobile

QR Code image

What is this?

Daily Court Reporter - News ABA reports law profession ill prepared for risk of cyber security threats


ABA reports law profession ill prepared for risk of cyber security threats

KEITH ARNOLD, Daily Reporter Staff Writer

Most law offices are underfunding their efforts to counter cyber risks, according to a report in the American Bar Association Journal.

As cyber security evolves, one characteristic of it that remains the same is how much of a threat it is to any business.

Julie Sobowale wrote for the Journal that the risk to the profession is more than just a technology issue or an added clause in the retainer agreement. Rather, it's the biggest risk that law firms currently face. The problem is money, sources told Sobowale. To have an effective cyber risk program requires, at minimum, up-to-date software, which - for any size law firm - can be very expensive.

"We are a self-governing profession, and there hasn't been an environment to do cyber security," said Daniel Garrie, founder of Law and Forensics, a tech firm specializing in forensic investigations. "The economics of the practice of law doesn't allow for investment.

"Even in the biggest firms, there are only three or four people working on cyber security. There's not much investment in people, resources, and they can't pass the cost on to clients."

Client pressure, however, may be swaying the trend in the other direction.

According to the 2016 ABA Legal Technology Survey Report, 30 percent of all law firms and 62 percent of firms of 500 lawyers or more reported that current or potential clients provided them with security requirements, the piece noted.

"We review data guidelines and protocols on how to use, store and protect their data," Griesing Law COO Jessica Mazzeo said. "Many of our corporate clients evaluate cyber security performance for all outside vendors and notify if expectations have been exceeded or require improvement."

The Journal piece detailed Mazzeo's experience with malware infecting the firm's network about a year ago. The network had to be taken down and virus software was run on every computer in the 12-attorney office in Philadelphia. Once the virus' origin was located, the offending hard drive was wiped.

Mazzeo said the incident resulted in changes to the way the firm dealt with websites, emails and mobile devices. The firm began working on a cloud-based program, permitting users to send files securely online and employed a firm to quarantine suspicious emails, the Journal reported.

With some changes to the firm's firewall to block access to risky websites, the firm also initiated a new email policy: "If the source is unknown or if you're not expecting the email, don't open it."

The ABA's tech survey says only 17.1 percent of all law firms had an incident response plan in place to address a security breach, and only 50 percent of firms of 500 lawyers or more had such a plan in place, and a cyber security practitioner believes engagement of senior management is key.

"There needs to be senior management engagement in cyber preparedness, and senior-level accountability in this area is increasingly expected by regulators and courts," said Luke Dembosky, a cyber security and litigation partner at Debevoise & Plimpton and former deputy assistant attorney general for national security at the Department of Justice. "Certainly, some aspects of breach preparation and response are IT-focused, but when a major cyber incident occurs, other executives at the company will need to weigh in, for example, on disclosures to the media, regulators, law enforcement and others.

"Law firms have tended to be behind the curve on these issues, but many are working hard to catch up."

Date Published: August 28, 2017


Copyright © 2017 The Daily Reporter - All Rights Reserved


Members of Ohio MS-13 arrested and charged

(Columbus) Thirteen individuals alleged to be members and associates of MS-13 were arrested in Central Ohio and Indiana recently.

21st Century Community Learning Center grants awarded

The Ohio Department of Education recently awarded approximately $44.3 million in new and continuing 21st Century Community Learning Center grants for Fiscal Year 2018.

Bill to thwart death penalty sentences for mentally ill has yet to progress

A bipartisan Senate effort that would scuttle death penalty sentences imposed against the mentally ill remains tied up in committee as lawmakers enjoyed the final weeks of a summer recess.

Task force seizes 200 pounds of marijuana, three arrested

Ohio Attorney General Mike DeWine, Montgomery County Sheriff Phil Plummer, U.S. Department of Homeland Security Investigations Special Agent in Charge Steve Francis, and members of the Miami Valley Bulk Smuggling Task Force announced recently the seizure of approximately 200 pounds of marijuana as part of an ongoing drug trafficking investigation.

'Freedom' is best response to white supremacy hatemongers

Let them march in Charlottesville. Let them speak.

The AFRL seeks innovative energy solutions

The Air Force Research Laboratory Advanced Power Technology Office is seeking innovative alternative energy and energy-efficient technology solutions with the recent release of its latest broad agency announcement, published July 19 on the Federal Business Opportunities website.

Montgomery County Tire Buyback event

On Sept. 24, 2017, Montgomery County Environmental Services will host its fifth Tire Buyback event. Residents can earn $2 for every scrap/used tire they bring, up to a maximum of 10 tires per vehicle.

The Cincinnati Zoo’s Baby Fiona update

The next milestone for Fiona will be transitioning from formula to solids so she is currently able to eat anything that Bibi is offered, but specifically given grain, beet pulp, apple, banana, and lettuce before and after each bottle feeding.

Dayton women's soccer falls short to Miami

The University of Dayton women's soccer team fought back and pulled within one goal at one point in the exhibition match, but fell 4-2 to visiting Miami Friday night at Baujan Field.

University of Dayton signs national pledge

President Eric F. Spina has joined CEO Action for Diversity & Inclusion, a growing coalition of more than 200 CEOs pledging to advance diversity and inclusion in the workplace.

University of Dayton’s class of 2021

The University of Dayton will welcome its largest and most diverse class in school history this fall.

Wright State, The Dayton Foodbank & Caresource helping others

On Aug. 11, over 500 families filed into the Wright State University Nutter Center parking lot. One by one the as The Dayton Foodbank provided the produce, Caresource the volunteers and Wright State’s Nutter Center the venue. This was the third consecutive year that Wright State welcomed the Dayton Foodbank’s distribution pick up in Greene County.

Ohio Chief Justice O’Connor named to lead two national court organizations

Ohio Chief Justice Maureen O’Connor has been elected president of the Conference of Chief Justices (CCJ) and chair of the National Center for State Courts (NCSC) Board of Directors. The one-year positions became effective recently during CCJ’s annual conference and NCSC’s Board of Directors meetings in Philadelphia.

New ways to comparison shop for health care

(BPT) As our nation seeks solutions to help improve the health care system, there is at least one goal we can all agree on: the importance of making health care quality and cost information more accessible to all Americans.

ABA House urges changes affecting undocumented immigrants, among other policy decisions

The American Bar Association House of Delegates, which determines association-wide policy, adopted policies over two days that urges Congress to add courthouses to the “sensitive locations” list for immigration enforcement and licensing groups to admit to the bar undocumented law school graduates under certain circumstances.

4 simple ways to stay productive and conquer your to-do list

(BPT) Did you know that in an average week, 75 percent of Americans skip doing something for themselves because they didn't adequately plan or allow enough time for it? Does looking at your to-do list feel so daunting that it discourages you from making any progress at all?

Canadian man charged with production of child pornography after meeting teen in Ohio

(Cleveland) A Canadian man arrested at a park in Rocky River was charged in federal court with production of child pornography.

Bill: Old records exempt from public disclosure law may see light of day

A bill before members of a committee in the Ohio House of Representatives may be an amateur genealogist's dream.

Small businesses, chamber oppose bill that would regulate employee hiring details

A bill crafted to protect some of the most private information of working individuals has come up against opposition in the Ohio House of Representatives.

Board of Professional Conduct concludes dual employment of specialized docket employees prohibited

The Board of Professional Conduct recently issued an advisory opinion concerning the dual employment of court employees in both a specialized drug court and a nonprofit drug treatment center under contract with the court.