Blogs

Tabletop Exercises: Practice what you Planned By David Tremont & Jon Washburn As law firm security professionals, we strive to ensure compliance with all the laws and regulations that apply both directly to our firms, and those that apply indirectly to us through our clients. Some of us even take our firms down the path of certification, where third parties attest that our processes and procedures are repeated the same way day in and day out, and that we are enforcing standards and policies consistently within our firms to mitigate threats and reduce risk. We sit in stuffy conference rooms and have long meetings to make sure our organizations are a ...

Well undoubtedly we have all heard of IoT or the Internet of Things. This will be the first of a two part series of Risks and Compliance of IoT. We will first look at what IoT really means and how this fast growing technology is causing reason for concern amongst Security professionals. 5 of the biggest cybersecurity risks in IoT What is IoT? The world of IoT consists of a multitude of devices such as smart phones, wearables , cameras, network connected Bio’s, readers, televisions, well you get the picture. It is basically anything that can connect to a network vis a vis the Internet, and when we connect devices to the Internet there are risks, ...

With the proliferation of mobile devices, many firms are struggling with how to best determine which devices to support, and which devices to avoid. During a friendly debate with technical staff over the relative strength of a particular mobile device’s encryption, it occurred to me that we were focusing on some of the common “techy” issues such as passwords, encryption, device wiping and Active Sync support, when we should have been considering larger Information Governance issues. So below is my attempt to combine both IT and Information Governance considerations into (the start of) a list of the issues a firm should consider when deciding to support a new ...