The LPLC has produced a guide full of practical information to help lawyers be cybersafe. The guide outlines key areas of focus and explains why each is important to be included in cybersafe strategies for law practices.
What's on this page?
Cybersecurity guide for lawyers
Cybersecurity guide for lawyers.pdf
About this resource
Law firms of all sizes, including sole practitioners, are targeted every day by cyber criminals from all over the world. Most law firms transact large amounts of money and hold confidential information that criminals can sell or use to extort a ransom payment.
Failure to protect your business and your clients’ money and information could be costly both financially and to your firm’s reputation.
The guide has been designed for sole practitioners and small to medium firms as this is where most of the cyber claims occur, however it is equally relevant as a resource for larger firms.
We know anecdotally that there are many sticking points to implementing greater cyber security measures. Practitioners tell us that they are stretched and don’t know where to start when it comes to taking steps to protect their practice.
Our Cybersecurity guide for lawyers aims to support practitioners to take the first, essential steps in five crucial areas:
- Secure your technology
- Establish policies and procedures
- Create a culture of cyber risk awareness
- Warn clients about cyber risks
- Have an incident response plan for prompt action
The guide explains briefly why each key area is important, sets out what to do and how to do it. It has been produced in a checklist format and includes links to valuable resources and information for those who want more detail.
Cyber fraud is a pervasive threat to the business operation and reputation of lawyers and law firms.
Awareness plus action is the key to putting firms on the pathway to greater cyber security.
Basic information for everyone
Every staff member in a law firm is responsible for keeping the firm safe from cyber-attack. There are many things that everyone can do to help lock the door on cyber-crime. It is important that everyone understands what the risks are and what part they must play.
The Australian Cyber Security Centre website is a good place for everyone to start to review basic information about protecting your business online. Register for the Australian Cyber Security Centre's Alert Service to receive updates on scams, risks and preventative action to protect your firm and your clients.
It is everyone's business
Cyber security is not just an IT issue. It is an essential part of today’s legal practice and everyone in your firm has a critical role in preventing cyber-crime. There is no silver bullet to protect your firm and your client’s money. The concept of cyber security must be built into everything people do in a law firm.
The approach to cyber security needs to be multi-pronged.
Useful websites and resources
Law Council of Australia - Cyber Precedent - strengthening the legal profession's defence against online threats
Australian Cyber Security Centre
Australian Competition and Consumer Commission
Australian Cybercrime Online Reporting Network
