You and your co-workers are the first line of defense when it comes to information security. A security awareness training program will help to stop data leaks.
You’ll rarely see a lawyer sweat. But if you want to, just mumble the term “data breach.”
Hackers are targeting law firms. This probably isn’t new news to you – the FBI has been giving this warning since 2009. And law firms keeping their data secure is becoming increasingly top of mind. What can firms do to keep themselves from being another cyber victim?
Security awareness training is quickly becoming law firms’ go-to method of adding that extra, needed layer of security to their data, with 49% of firms having security awareness training programs in place – and for law firms with more than 350 attorneys, that number increases to 86%.
What Is Security Awareness Training?
Security awareness training is what you’re probably guessing right now – a program or process that educates employees on computer security.
I’m not referring to the type of “program” where there’s an “acceptable use policy” thrown together and handed out to new and existing employees, but an actual formal program that brings awareness to employees of the security risks in their inherent actions, with examples of how security can be compromised, and training on how to be proactive in minimizing information security risks.
However, most organizations don’t have the in-house expertise needed to create an effective security awareness training program, which is one of the factors playing a role in the trend toward more outsourcing – 79% of these programs were developed internally in 2015, compared to 86% in 2014.
Why Do You Need it?
Most high-profile cyber security breaches occur when hackers target an organization's weakest link – its people.
And to “beat” cyber-threats, it’s all about how quickly and effectively your firm responds to hackers and removes them from your systems.
Users are on the frontlines every day so doesn’t it make sense to arm them with the ability to protect them and the firm from hackers and an informed vigilant workforce is your number one defense against these attacks.
Relying too heavily on technology and neglecting the human factor leaves your firm – and all of those sensitive case files – vulnerable to attacks and could easily result in the loss of intellectual property, confidential client information, respect, and revenue.
By outsourcing a security awareness training program for your law firm, everyone can feel more secure knowing that they’re armed with the right technology, have the knowledge they need to spot an attack, and how to handle it when they do.
Security Tips
Until your firm has a formal security awareness training program, here are a few simple security tips to start with.
- Information Security Policies – Set expectations of how employees should behave with their access and use of data. Employees can’t follow the rules if there aren’t clearly set rules to follow.
- Encryption – By encrypting your data (whether it’s at rest, in use, or in transit) and sensitive emails, your confidential information will remain, well, confidential.
- Secure Mobile Devices – Technology isn’t going anywhere so make sure they’re being managed and secured. Encryption will also enhance mobile security, but also use things like password protection or use a remote wipe if the device is lost or stolen.
- Avoid Open Wi-Fi – Never hop on an unsecure, public Wi-Fi and start looking at client documents. Use your firm’s VPN (Virtual Private Network) to ensure your opening and reading client information securely.
Is your firm doing everything it can to safeguard client data? Security awareness and training will help ensure that you are.
Have questions? Let’s talk – we’d love to hear from you.
