{"id":36867,"date":"2016-09-22T18:06:42","date_gmt":"2016-09-22T18:06:42","guid":{"rendered":"https:\/\/www.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/"},"modified":"2021-04-13T10:08:54","modified_gmt":"2021-04-13T14:08:54","slug":"eye-on-discovery-can-you-trust-your-law-firms-with-your-data","status":"publish","type":"avada_portfolio","link":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/","title":{"rendered":"Eye on Discovery – Can You Trust Your Law Firms With Your Data?"},"content":{"rendered":"

Eye on Discovery -Can You Trust Your Law Firms With Your Data?<\/h1><\/span>
<\/div><\/div><\/div>

Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats. Consider, for example, the HVAC vendor that was the conduit for the Target breach in November 2013. Attackers used an e-mail phishing campaign to steal the vendor\u2019s login credentials to a Target-hosted web service used for e-billing, contract submission and project management. Once in the system, the hackers uploaded seemingly innocuous files that allowed them to hide in plain sight so they could infiltrate more systems and, ultimately, steal customers\u2019 credit card information.<\/p>\n

While many organizations have learned lessons from the Target breach and have shored up their protocols for vetting third-party vendors, they often overlook digital security when shipping their most prized secrets to their outside counsel. But recent breaches at top U.S. law firms<\/a> and studies showing lax security measures at many others<\/a> suggest that this blind trust is misplaced. According to an American Bar Association survey, one in four law firms with at least 100 attorneys has experienced a security breach<\/a>. These statistics should come as little surprise, as outside counsel possess a host of sensitive and invaluable data, such as trade secrets, patent applications, details about proposed business transactions and other valuable confidential information about their clients, that puts them squarely in hackers\u2019 sights.<\/p>\n

With threats to law firm networks<\/a> on the rise, what\u2019s a business to do? Incorporate law firms into their third-party information governance program to manage the risk. Here are four practical steps for getting started.<\/p>\n

1. Maintain greater control over data.<\/em><\/strong><\/p>\n

Reducing the volume of confidential or sensitive data hosted by outside counsel is one way concerned organizations can stem the risks. Businesses can start by halting the shipment of data to outside law firms. Instead, businesses can share data in a centralized platform that they host, where they can apply heightened security requirements to it and closely monitor all access.<\/p>\n

2. Inventory and remediate existing data. <\/em><\/strong><\/p>\n

Organizations should survey their law firms to identify where their data is located and how much data each firm houses. They should then identify any outdated data and develop a plan to remediate it with the law firm\u2019s assistance. Outside counsel should not retain data for a moment longer than necessary, particularly when matters close or when lawyers leave the firm.<\/p>\n

3. Establish a go-forward policy. <\/em><\/strong><\/p>\n

Organizations should include law firms in their policy governing all third-party data use. One way to structure the policy is to create tiered responsibilities for managing the organization\u2019s data. For example, all law firms must have basic security protocols, but firms that receive over a certain threshold of data may be required to implement additional security measures. Some of these measures can include annual reviews or on-site digital security assessments. Regardless of the measures, clients should require all outside lawyers to reaffirm their understanding of their role and obligations involving data security, perhaps coincident with outside counsel guideline updates. Once established, organizations need to communicate the new policy to their law firms as well as to their in-house counsel and law firm relationship managers.<\/p>\n

4. Measure compliance.<\/em><\/strong><\/p>\n

Many businesses use surveys to evaluate their vendors\u2019 compliance. Unfortunately, these surveys can be highly subjective and time-consuming. They can also make it difficult to compare apples to apples, particularly when it comes to law firms, which occupy a special niche given their nearly carte blanche access to an organization\u2019s most complex and sensitive data. Instead, companies should use a quantitative survey instrument customized to law firms to facilitate a meaningful assessment. A security scorecard is one way to encourage law firms to improve their privacy and security practices, and it ties in with holistic law firm performance management strategies for rates, diversity, responsiveness and the like. The security scorecard can account for the type of information the law firm holds, the type of services it provides and its data security infrastructure. More specifically, it can consider the firm\u2019s security certifications, mobile device management protocols, data loss prevention efforts, encryption measures, information flows, recovery and retention plans, other data-related policies and procedures and training and enforcement mechanisms. With this information, organizations can objectively weigh the level of risk in sharing data with their law firms against other factors, such as their cost, to ensure that the highest-risk matters are protected by firms with the highest security standards.<\/p>\n

By taking these four steps, organizations can create the foundation for a sound information governance program that can mitigate the hazards of sharing data with their outside counsel.<\/p>\n<\/div>

<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":11,"featured_media":0,"menu_order":0,"template":"","format":"standard","meta":{"footnotes":""},"portfolio_category":[1022,1020,1027,724,386,192,419,177],"portfolio_skills":[],"portfolio_tags":[1108,1109,1116],"yoast_head":"\nEye on Discovery - Can You Trust Your Law Firms With Your Data? - Consilio.com<\/title>\n<meta name=\"description\" content=\"Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Eye on Discovery - Can You Trust Your Law Firms With Your Data?\" \/>\n<meta property=\"og:description\" content=\"Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/\" \/>\n<meta property=\"og:site_name\" content=\"Consilio.com\" \/>\n<meta property=\"article:modified_time\" content=\"2021-04-13T14:08:54+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/\",\"url\":\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/\",\"name\":\"Eye on Discovery - Can You Trust Your Law Firms With Your Data? - Consilio.com\",\"isPartOf\":{\"@id\":\"https:\/\/uk.consilio.com\/#website\"},\"datePublished\":\"2016-09-22T18:06:42+00:00\",\"dateModified\":\"2021-04-13T14:08:54+00:00\",\"description\":\"Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats.\",\"breadcrumb\":{\"@id\":\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/#breadcrumb\"},\"inLanguage\":\"en-UK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/uk.consilio.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Portfolio\",\"item\":\"https:\/\/uk.consilio.com\/resource\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Eye on Discovery – Can You Trust Your Law Firms With Your Data?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/uk.consilio.com\/#website\",\"url\":\"https:\/\/uk.consilio.com\/\",\"name\":\"Consilio.com\",\"description\":\"International eDiscovery and Managed Review Provider\",\"publisher\":{\"@id\":\"https:\/\/uk.consilio.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/uk.consilio.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-UK\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/uk.consilio.com\/#organization\",\"name\":\"Consilio\",\"url\":\"https:\/\/uk.consilio.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-UK\",\"@id\":\"https:\/\/uk.consilio.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/uk.consilio.com\/wp-content\/uploads\/2020\/10\/ConsilioBlueLogo.png\",\"contentUrl\":\"https:\/\/uk.consilio.com\/wp-content\/uploads\/2020\/10\/ConsilioBlueLogo.png\",\"width\":153,\"height\":51,\"caption\":\"Consilio\"},\"image\":{\"@id\":\"https:\/\/uk.consilio.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Eye on Discovery - Can You Trust Your Law Firms With Your Data? - Consilio.com","description":"Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/","og_locale":"en_US","og_type":"article","og_title":"Eye on Discovery - Can You Trust Your Law Firms With Your Data?","og_description":"Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats.","og_url":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/","og_site_name":"Consilio.com","article_modified_time":"2021-04-13T14:08:54+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/","url":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/","name":"Eye on Discovery - Can You Trust Your Law Firms With Your Data? - Consilio.com","isPartOf":{"@id":"https:\/\/uk.consilio.com\/#website"},"datePublished":"2016-09-22T18:06:42+00:00","dateModified":"2021-04-13T14:08:54+00:00","description":"Your data is only as safe as the data of your least secure link to it. Unfortunately, for many organizations, suppliers that host data have typically proven a much easier bullseye for hackers and other external threats.","breadcrumb":{"@id":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/#breadcrumb"},"inLanguage":"en-UK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/uk.consilio.com\/resource\/eye-on-discovery-can-you-trust-your-law-firms-with-your-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/uk.consilio.com\/"},{"@type":"ListItem","position":2,"name":"Portfolio","item":"https:\/\/uk.consilio.com\/resource\/"},{"@type":"ListItem","position":3,"name":"Eye on Discovery – Can You Trust Your Law Firms With Your Data?"}]},{"@type":"WebSite","@id":"https:\/\/uk.consilio.com\/#website","url":"https:\/\/uk.consilio.com\/","name":"Consilio.com","description":"International eDiscovery and Managed Review Provider","publisher":{"@id":"https:\/\/uk.consilio.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/uk.consilio.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-UK"},{"@type":"Organization","@id":"https:\/\/uk.consilio.com\/#organization","name":"Consilio","url":"https:\/\/uk.consilio.com\/","logo":{"@type":"ImageObject","inLanguage":"en-UK","@id":"https:\/\/uk.consilio.com\/#\/schema\/logo\/image\/","url":"https:\/\/uk.consilio.com\/wp-content\/uploads\/2020\/10\/ConsilioBlueLogo.png","contentUrl":"https:\/\/uk.consilio.com\/wp-content\/uploads\/2020\/10\/ConsilioBlueLogo.png","width":153,"height":51,"caption":"Consilio"},"image":{"@id":"https:\/\/uk.consilio.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/avada_portfolio\/36867"}],"collection":[{"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/avada_portfolio"}],"about":[{"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/types\/avada_portfolio"}],"author":[{"embeddable":true,"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/users\/11"}],"version-history":[{"count":0,"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/avada_portfolio\/36867\/revisions"}],"wp:attachment":[{"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/media?parent=36867"}],"wp:term":[{"taxonomy":"portfolio_category","embeddable":true,"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/portfolio_category?post=36867"},{"taxonomy":"portfolio_skills","embeddable":true,"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/portfolio_skills?post=36867"},{"taxonomy":"portfolio_tags","embeddable":true,"href":"https:\/\/uk.consilio.com\/wp-json\/wp\/v2\/portfolio_tags?post=36867"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}