Cybersecurity standards and implementation guide

Your junior lawyer has used a generative artificial intelligence (AI) tool to draft submissions for a Supreme Court hearing. The draft looks polished. But if in several months’ time, the Court asks which parts were produced by AI and how each citation was checked, could you answer that question? 

Cybersecurity training is one of your most important risk controls. When we think about cybersecurity, we often picture sophisticated computer attacks with hackers running complex code, breaching firewalls, and exploiting software vulnerabilities. The reality is far more mundane, and far more unsettling. Most successful cyberattacks succeed not because a criminal outsmarted a computer, but because they outsmarted a person.

If a cybercriminals has infiltrated your network they can manipulated system rules to move undetected through your practice's digital environment. Two of the most overlooked vulnerabilities in law firms are email rules and access controls. Regularly checking both is a simple but powerful way to detect intrusions early and limit the damage they can cause.