Blog Archive – Page 7
February 6, 2026 – March 7, 2026 · page 7 of 12
The 3-2-1-1-0 Backup Rule Explained for Law Firms
The classic 3-2-1 backup rule has gained two more digits. See what 3-2-1-1-0 means and how a law firm can apply it to protect client files from ransomware.
Legal CybersecurityPhishing-Resistant MFA: A Practical Guide for Small Law Firms
Not all multi-factor authentication is equal. Learn which MFA methods hold up against phishing and how a law firm can roll out stronger options step by step.
Cyber Insurance and Client Security QuestionnairesHow to Prepare for Your Cyber Insurance Renewal Application
Cyber insurance applications ask detailed security questions. Here is how a law firm can gather answers, close gaps early and avoid inaccurate responses.
Legal Ethics and Technology ComplianceRule 5.3 and Your IT Vendor: Supervising Nonlawyer Technology Help
ABA Model Rule 5.3 on supervising nonlawyer assistance, and how it can apply to outside IT vendors, cloud providers and consultants handling client data.
Managed IT for Law FirmsWhat a Law Firm Should Expect From a Managed IT Contract
A plain-English look at what belongs in a managed IT agreement for a law firm: scope, response times, security duties, data ownership and exit terms.
Backup and Disaster Recovery for Law FirmsProtecting Practice-Management Data: Backing Up Cloud Applications
Cloud practice-management and document platforms are not automatically backed up the way partners assume. Here is how to protect that data yourself.
Wire Fraud and Email SecurityFake Invoices and Vendor Fraud: Protecting Firm Accounts Payable
Wire fraud does not only hit trust accounts. Learn how fake invoices and vendor payment changes target law firm accounts payable, and how to stop them.
AI and Emerging Technology for Law FirmsAI Meeting Notetakers and Privilege: Questions to Ask First
AI notetakers can transcribe client calls automatically, but they raise privilege, consent and retention questions. Review these before enabling one.
Legal Ethics and Technology ComplianceDuty to Notify: What ABA Formal Opinion 483 Says About Breaches
ABA Formal Opinion 483 outlines lawyers' obligations after a data breach, including monitoring, response and client notice. Here is a plain summary.
Managed IT for Law FirmsBudgeting for IT at a Small Law Firm: Where the Money Goes
A framework for planning a law firm's IT and security budget, covering the main cost categories, hidden costs and ways to avoid overspending.
Backup and Disaster Recovery for Law FirmsRansomware Recovery Walkthrough for a Hypothetical Law Firm
A hypothetical timeline shows how a 25-attorney firm could recover from ransomware, and which backup and planning choices decide the outcome.
Wire Fraud and Email SecuritySecuring the Real Estate Closing Wire Process at a Law Firm
Real estate closings concentrate large wires and tight deadlines. Here is a stage-by-stage process for protecting both incoming and outgoing funds.
AI and Emerging Technology for Law FirmsMyth vs Reality: Common Beliefs About AI Tools in Law Firms
Seven common misconceptions about generative AI in law firms, from confidentiality to hallucinations to the idea that a ban solves everything.
Practice Management TechnologyMicrosoft 365 Settings Law Firms Often Leave Unconfigured
Microsoft 365 ships with convenient defaults that are not always safe for law firms. Review these settings for email, sharing, identity and retention.
Legal CybersecurityOffboarding Checklist: Closing Access When Attorneys and Staff Leave
When someone leaves a firm, their access should end the same day. Use this offboarding checklist to cover email, devices, cloud apps and client files.
Backup and Disaster Recovery for Law FirmsSetting RTO and RPO Recovery Targets for Your Law Firm
Recovery time and recovery point objectives turn a vague wish to be back quickly into numbers. Here is how partners can set them for each firm system.
Wire Fraud and Email SecurityBusiness Email Compromise Red Flags in Law Firm Inboxes
Learn the technical and behavioral signs of business email compromise in law firm mailboxes, and what to check the moment something looks wrong.
AI and Emerging Technology for Law FirmsVetting AI Tools Before Client Data Goes Near Them
A due-diligence checklist for evaluating AI vendors, covering data use, retention, access controls, contracts and testing before a law firm approves a tool.
Practice Management TechnologyPlanning a Document Management Move to NetDocuments or iManage
Moving from network folders to a document management system succeeds or fails on planning. Use this phase-by-phase guide for law firm migrations.
Legal CybersecurityEndpoint Detection and Response vs Antivirus for Law Firms
Traditional antivirus is not enough for modern attacks. Learn how EDR and managed detection differ and what a law firm should ask before buying.
Cyber Insurance and Client Security QuestionnairesCyber Insurance Exclusions Law Firms Should Read Before Signing
A good cyber policy can still leave gaps. Review common exclusions, sublimits and conditions that law firms should understand before a claim happens.
Legal Ethics and Technology ComplianceFormal Opinion 477R: Securing Client Email and Communications
ABA Formal Opinion 477R asks lawyers to make reasonable efforts to secure client communications. Here is a plain-English guide for firm leaders.
AI and Emerging Technology for Law FirmsA Section-by-Section Outline for a Law Firm AI Use Policy
A section-by-section outline for a law firm generative AI policy covering approved tools, confidentiality, verification, billing and training.
Practice Management TechnologyClio Security Settings Every Firm Administrator Should Review
A practical review of the security and access settings in Clio and similar practice-management platforms that firm administrators should check regularly.
Legal CybersecurityPhishing at Law Firms: Common Lures and How to Train Against Them
Law firm phishing relies on urgency, authority and familiar workflows. See the lures staff meet most often and how to train people to spot them.
Cyber Insurance and Client Security QuestionnairesAnswering Client Security Questionnaires Without Stalling a Matter
Corporate clients increasingly send long security questionnaires. Build a reusable answer library so your firm can respond accurately and quickly.
Legal Ethics and Technology ComplianceRule 5.3 and Your IT Vendors: Supervising Nonlawyer Assistance
Model Rule 5.3 covers nonlawyer assistance, and ABA guidance applies it to IT and cloud vendors. Here is how firms can build a vendor supervision process.
Managed IT for Law FirmsHelp Desk Response Times Law Firms Should Expect From an MSP
Deadlines do not wait for a ticket queue. Learn which help desk response targets, hours and escalation paths a law firm should ask a managed IT provider for.
Backup and Disaster Recovery for Law FirmsBackup Testing for Law Firms: How to Prove Restores Really Work
A backup is only as good as your last successful restore. Here is a simple testing schedule and scorecard law firms can use to verify recovery.
Legal CybersecurityMulti-Factor Authentication for Law Firms: Where to Turn It On First
Not every login needs MFA on day one. Here is a prioritized rollout order for law firms, with tips for avoiding attorney pushback and weak methods.