Company is a national law firm with offices in many jurisdictions. To save costs and improve security, the Company has begun consolidation of Company IT resources at an enterprise wide data center thru a 10 year contract with an external service provider. How is the risk of a breach of electronically maintained client confidential information best managed?

Individual Courts and Regulators have distinct requirements with respect to the security of electronic filings. What approach should the Firm take to ensure that its Attorneys have the capability to submit electronic filings where ever such are allowed?

One of the Firm’s offices has experienced a successful intrusion into its network by hackers, but due to poor incident response is unable to determine what information may have been accessed or modified. What action should immediately be taken?

Firm Attorneys regularly include client confidential information in unencrypted Internet email. Cannons of attorney ethics do not require that Attorneys encrypt email or notify clients that they are using insecure email. What is the Firm’s best course of action?

The Firm is considering deploying a Client portal through which clients can submit required documents, preview filings requiring signature, review billing records, and securely communicate with Attorneys and other staff. What information is the most important to collect when evaluating the risk associated with the portal?