Cybersecurity for law firms and solo attorneys
Your duty of confidentiality now includes your laptop, your email and your cloud accounts. I set up the protection with you, write your security plan, train your staff, and serve as your Security Officer, so you can focus on your clients’ cases.
The rules you face
ABA Model Rules 1.1 and 1.6(c): you must understand the technology you use and make reasonable efforts to prevent unauthorized access to client information. Most state bars have adopted both.
ABA Formal Opinions 477R and 483: secure how you communicate with clients, and if a breach happens, monitor for it, stop it, and tell affected clients.
Client data from regulated industries: medical records in a personal injury case or a healthcare client’s files can bring in HIPAA, and financial records can bring in other rules.
State breach laws: every state requires you to notify people when their personal information is exposed.
Learn more: Which rules apply to you?
What you get
A written security plan: built from your inventory, and ready for a client security questionnaire or your cyber insurance application.
A named Security Officer: I take that role by contract, track what's due, and keep the paperwork current. You keep every decision.
Vendor management: a simple process for you to check and keep watch on the security of every vendor that handles your clients’ data.
Monitored protection: 24/7 protection on your devices and email, set up with you.
Staff training: everyone who touches client files completes it, with records kept.
An incident response plan: who to call, and how to notify clients and the state if something happens.
A yearly review: we update your plan, devices, vendors and access together.
Want to see the full process? See How It Works.
What clients say
-
“I recommend Todd Mitchell of CyberSecurity4Biz for his strong expertise in cybersecurity, professionalism, and ability to deliver practical, business-focused security solutions. He is knowledgeable, reliable, and a trusted resource for organizations seeking to strengthen their cybersecurity posture.”
Dr. Retha Stewart, PhD, LH Consulting / LegalShield
-
“Todd's knowledge and experience in Cybersecurity is extensive. And just as important, he is here to help us navigate Cybersecurity needs and issues relevant to small to mid-sized businesses. I highly recommend reaching out to Todd about your Cybersecurity needs. In today's world who doesn't want to make sure our devices are protected in a way that is pertinent and needed for our business? In an hour Todd helped to clarify some key issues for me. Thank you Todd.”
Pat Weber, LegalShield / IDShield
Common questions
I'm a solo attorney. Does this apply to me?
Yes. Rule 1.6(c) has no size cutoff, and a breach at a one-lawyer office still triggers your duty to tell clients.
My practice management software is in the cloud. Isn't that secure?
The vendor secures its servers. Your devices, email, passwords and who can log in are on you, and so is checking the vendor.
What about wire fraud on closings and settlements?
It's one of the most common attacks on law firms. Training, email protection and a call-back rule for payment changes stop most of it.