<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://counselcyber.com/blog/</loc><lastmod>2026-10-04</lastmod></url><url><loc>https://counselcyber.com/blog/archive/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/2/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/3/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/4/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/5/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/6/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/7/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/8/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/9/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/10/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/11/</loc></url><url><loc>https://counselcyber.com/blog/archive/page/12/</loc></url><url><loc>https://counselcyber.com/blog/optimizing-it-support-help-desk-best-practices-for-law-firms/</loc><lastmod>2026-10-04</lastmod></url><url><loc>https://counselcyber.com/blog/cybersecurity-month-law-firms-five-habits-worth-building/</loc><lastmod>2026-10-03</lastmod></url><url><loc>https://counselcyber.com/blog/backup-mistakes-law-firms-make-and-how-to-fix-each-one/</loc><lastmod>2026-10-02</lastmod></url><url><loc>https://counselcyber.com/blog/closing-day-wire-fraud-step-by-step-verification-protocol/</loc><lastmod>2026-10-01</lastmod></url><url><loc>https://counselcyber.com/blog/writing-generative-ai-use-policy-associates-will-follow/</loc><lastmod>2026-09-30</lastmod></url><url><loc>https://counselcyber.com/blog/clio-netdocuments-access-reviews-quarterly-checklist/</loc><lastmod>2026-09-29</lastmod></url><url><loc>https://counselcyber.com/blog/insider-risk-at-law-firms-preventing-data-walkouts-and-mistakes/</loc><lastmod>2026-09-28</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-on-a-budget-smaller-firm-strategies-that-work/</loc><lastmod>2026-09-27</lastmod></url><url><loc>https://counselcyber.com/blog/responding-to-a-bar-inquiry-after-a-data-incident-a-readiness-guide/</loc><lastmod>2026-09-26</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-notes-and-transcription-confidentiality-risks-for-firms/</loc><lastmod>2026-09-25</lastmod></url><url><loc>https://counselcyber.com/blog/trust-accounting-software-and-it-controls-protecting-client-funds/</loc><lastmod>2026-09-24</lastmod></url><url><loc>https://counselcyber.com/blog/securing-remote-and-hybrid-attorneys-a-practical-setup-guide/</loc><lastmod>2026-09-23</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-exclusions-law-firms-overlook-until-a-claim/</loc><lastmod>2026-09-22</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-6-c-and-cloud-storage-reasonable-efforts-for-client-data/</loc><lastmod>2026-09-21</lastmod></url><url><loc>https://counselcyber.com/blog/is-your-law-firm-outgrowing-its-it-person-signs-and-next-steps/</loc><lastmod>2026-09-20</lastmod></url><url><loc>https://counselcyber.com/blog/disaster-recovery-planning-for-law-firms-beyond-cyberattacks/</loc><lastmod>2026-09-19</lastmod></url><url><loc>https://counselcyber.com/blog/law-firm-password-practices-what-to-keep-and-what-to-retire/</loc><lastmod>2026-09-18</lastmod></url><url><loc>https://counselcyber.com/blog/building-an-answer-library-for-client-security-questionnaires/</loc><lastmod>2026-09-17</lastmod></url><url><loc>https://counselcyber.com/blog/supervising-vendors-and-staff-on-tech-a-rule-5-1-and-5-3-walkthrough/</loc><lastmod>2026-09-16</lastmod></url><url><loc>https://counselcyber.com/blog/onboarding-and-offboarding-checklists-for-law-firm-it/</loc><lastmod>2026-09-15</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-backup-for-law-firms-what-microsoft-does-not-cover/</loc><lastmod>2026-09-14</lastmod></url><url><loc>https://counselcyber.com/blog/vendor-email-compromise-when-the-fraud-comes-from-someone-you-trust/</loc><lastmod>2026-09-13</lastmod></url><url><loc>https://counselcyber.com/blog/shadow-ai-at-your-law-firm-how-to-find-it-and-bring-it-in/</loc><lastmod>2026-09-12</lastmod></url><url><loc>https://counselcyber.com/blog/model-rule-1-1-and-technology-competence-what-it-means-in-practice/</loc><lastmod>2026-09-11</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-managed-it-contract-for-a-law-firm-should-actually-cover/</loc><lastmod>2026-09-10</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-recovery-without-paying-a-law-firm-readiness-guide/</loc><lastmod>2026-09-09</lastmod></url><url><loc>https://counselcyber.com/blog/spotting-a-compromised-mailbox-before-it-costs-your-firm-money/</loc><lastmod>2026-09-08</lastmod></url><url><loc>https://counselcyber.com/blog/ten-questions-to-ask-before-buying-a-legal-ai-tool/</loc><lastmod>2026-09-07</lastmod></url><url><loc>https://counselcyber.com/blog/retiring-the-file-server-moving-your-firm-s-documents-to-the-cloud/</loc><lastmod>2026-09-06</lastmod></url><url><loc>https://counselcyber.com/blog/zero-trust-for-small-law-firms-what-it-means-in-practice/</loc><lastmod>2026-09-05</lastmod></url><url><loc>https://counselcyber.com/blog/backup-testing-for-law-firms-how-to-prove-you-can-restore/</loc><lastmod>2026-09-04</lastmod></url><url><loc>https://counselcyber.com/blog/the-wire-fraud-call-back-rule-how-to-build-it-and-enforce-it/</loc><lastmod>2026-09-03</lastmod></url><url><loc>https://counselcyber.com/blog/outline-for-a-law-firm-ai-policy-built-around-aba-opinion-512/</loc><lastmod>2026-09-02</lastmod></url><url><loc>https://counselcyber.com/blog/clio-vs-netdocuments-vs-imanage-how-to-choose-for-your-firm/</loc><lastmod>2026-09-01</lastmod></url><url><loc>https://counselcyber.com/blog/why-law-firms-get-targeted-the-attacker-s-view-of-your-data/</loc><lastmod>2026-08-31</lastmod></url><url><loc>https://counselcyber.com/blog/a-60-day-countdown-to-your-law-firm-s-cyber-insurance-renewal/</loc><lastmod>2026-08-30</lastmod></url><url><loc>https://counselcyber.com/blog/eight-part-self-audit-is-your-firm-keeping-up-with-technology/</loc><lastmod>2026-08-29</lastmod></url><url><loc>https://counselcyber.com/blog/evaluating-legal-ai-vendors-a-due-diligence-question-list/</loc><lastmod>2026-08-28</lastmod></url><url><loc>https://counselcyber.com/blog/document-management-hygiene-naming-folders-and-access-rules/</loc><lastmod>2026-08-27</lastmod></url><url><loc>https://counselcyber.com/blog/password-management-for-law-firms-policies-staff-will-follow/</loc><lastmod>2026-08-26</lastmod></url><url><loc>https://counselcyber.com/blog/ninety-days-out-getting-a-law-firm-ready-for-cyber-renewal/</loc><lastmod>2026-08-25</lastmod></url><url><loc>https://counselcyber.com/blog/supervising-a-remote-team-home-office-security-and-opinion-498/</loc><lastmod>2026-08-24</lastmod></url><url><loc>https://counselcyber.com/blog/reading-your-it-report-six-help-desk-numbers-worth-tracking/</loc><lastmod>2026-08-23</lastmod></url><url><loc>https://counselcyber.com/blog/recycle-bin-retention-backup-protecting-microsoft-365-data/</loc><lastmod>2026-08-22</lastmod></url><url><loc>https://counselcyber.com/blog/antivirus-edr-and-mdr-what-a-law-firm-actually-needs/</loc><lastmod>2026-08-21</lastmod></url><url><loc>https://counselcyber.com/blog/client-security-questionnaire-answers-owners-evidence-review/</loc><lastmod>2026-08-20</lastmod></url><url><loc>https://counselcyber.com/blog/breach-notification-planning-lessons-from-aba-opinion-483/</loc><lastmod>2026-08-19</lastmod></url><url><loc>https://counselcyber.com/blog/joiners-and-leavers-the-attorney-account-lifecycle-for-firm-it/</loc><lastmod>2026-08-18</lastmod></url><url><loc>https://counselcyber.com/blog/how-long-can-we-be-down-business-targets-for-disaster-recovery/</loc><lastmod>2026-08-17</lastmod></url><url><loc>https://counselcyber.com/blog/anatomy-of-an-email-fraud-six-stages-and-where-to-break-them/</loc><lastmod>2026-08-16</lastmod></url><url><loc>https://counselcyber.com/blog/should-an-ai-bot-join-the-client-call-privilege-and-consent/</loc><lastmod>2026-08-15</lastmod></url><url><loc>https://counselcyber.com/blog/reasonable-efforts-under-rule-1-6-c-what-a-careful-firm-does/</loc><lastmod>2026-08-14</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-managed-it-agreement-for-a-law-firm-should-include/</loc><lastmod>2026-08-13</lastmod></url><url><loc>https://counselcyber.com/blog/restore-testing-the-backup-step-most-law-firms-skip/</loc><lastmod>2026-08-12</lastmod></url><url><loc>https://counselcyber.com/blog/spotting-spoofed-emails-a-quick-training-guide-for-law-firm-staff/</loc><lastmod>2026-08-11</lastmod></url><url><loc>https://counselcyber.com/blog/drafting-a-generative-ai-policy-for-your-firm-an-outline/</loc><lastmod>2026-08-10</lastmod></url><url><loc>https://counselcyber.com/blog/clio-netdocuments-or-imanage-questions-to-ask-before-choosing/</loc><lastmod>2026-08-09</lastmod></url><url><loc>https://counselcyber.com/blog/multi-factor-authentication-myths-law-firm-partners-still-believe/</loc><lastmod>2026-08-08</lastmod></url><url><loc>https://counselcyber.com/blog/three-copies-two-media-one-offsite-backups-for-law-firm-data/</loc><lastmod>2026-08-07</lastmod></url><url><loc>https://counselcyber.com/blog/a-wire-instruction-callback-procedure-that-actually-works/</loc><lastmod>2026-08-06</lastmod></url><url><loc>https://counselcyber.com/blog/before-you-turn-on-microsoft-copilot-a-data-cleanup-checklist/</loc><lastmod>2026-08-05</lastmod></url><url><loc>https://counselcyber.com/blog/a-quarterly-access-review-for-your-practice-management-system/</loc><lastmod>2026-08-04</lastmod></url><url><loc>https://counselcyber.com/blog/suspicious-login-alert-a-walkthrough-of-the-first-24-hours/</loc><lastmod>2026-08-03</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-applications-answer-accurately-not-optimistically/</loc><lastmod>2026-08-02</lastmod></url><url><loc>https://counselcyber.com/blog/rule-5-3-and-your-it-vendor-supervising-nonlawyer-help/</loc><lastmod>2026-08-01</lastmod></url><url><loc>https://counselcyber.com/blog/building-a-sanctioned-ai-tool-list-for-your-law-firm/</loc><lastmod>2026-07-31</lastmod></url><url><loc>https://counselcyber.com/blog/e-signature-and-client-portals-secure-ways-to-exchange-documents/</loc><lastmod>2026-07-30</lastmod></url><url><loc>https://counselcyber.com/blog/mobile-device-security-for-attorneys-who-work-from-anywhere/</loc><lastmod>2026-07-29</lastmod></url><url><loc>https://counselcyber.com/blog/outside-counsel-guidelines-security-terms-your-firm-should-expect/</loc><lastmod>2026-07-28</lastmod></url><url><loc>https://counselcyber.com/blog/model-rule-1-4-and-cyber-incidents-what-clients-should-hear/</loc><lastmod>2026-07-27</lastmod></url><url><loc>https://counselcyber.com/blog/law-firm-help-desk-metrics-worth-asking-your-it-provider-for/</loc><lastmod>2026-07-26</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-backup-myths-that-law-firms-still-believe/</loc><lastmod>2026-07-25</lastmod></url><url><loc>https://counselcyber.com/blog/passwords-passkeys-and-password-managers-for-law-firm-staff/</loc><lastmod>2026-07-24</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-renewal-prep-what-underwriters-ask-law-firms/</loc><lastmod>2026-07-23</lastmod></url><url><loc>https://counselcyber.com/blog/model-rule-5-3-and-your-it-vendors-supervising-nonlawyer-help/</loc><lastmod>2026-07-22</lastmod></url><url><loc>https://counselcyber.com/blog/in-house-it-person-or-managed-provider-a-practical-comparison/</loc><lastmod>2026-07-21</lastmod></url><url><loc>https://counselcyber.com/blog/disaster-recovery-planning-when-your-office-is-unreachable/</loc><lastmod>2026-07-20</lastmod></url><url><loc>https://counselcyber.com/blog/five-business-email-compromise-scams-aimed-at-lawyers/</loc><lastmod>2026-07-19</lastmod></url><url><loc>https://counselcyber.com/blog/hallucinated-citations-a-verification-workflow-for-ai-assisted-drafts/</loc><lastmod>2026-07-18</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-483-and-your-firm-s-breach-response-plan/</loc><lastmod>2026-07-17</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-good-managed-it-agreement-for-a-law-firm-should-include/</loc><lastmod>2026-07-16</lastmod></url><url><loc>https://counselcyber.com/blog/setting-recovery-time-and-recovery-point-goals-for-your-firm/</loc><lastmod>2026-07-15</lastmod></url><url><loc>https://counselcyber.com/blog/dmarc-spf-and-dkim-a-plain-english-guide-for-law-firms/</loc><lastmod>2026-07-14</lastmod></url><url><loc>https://counselcyber.com/blog/ai-note-takers-on-client-calls-convenience-risk-and-rules/</loc><lastmod>2026-07-13</lastmod></url><url><loc>https://counselcyber.com/blog/onboarding-a-new-attorney-the-it-checklist-firms-forget/</loc><lastmod>2026-07-12</lastmod></url><url><loc>https://counselcyber.com/blog/money-files-and-leverage-what-attackers-want-from-a-law-firm/</loc><lastmod>2026-07-11</lastmod></url><url><loc>https://counselcyber.com/blog/live-data-local-copy-cloud-copy-building-3-2-1-backups/</loc><lastmod>2026-07-10</lastmod></url><url><loc>https://counselcyber.com/blog/closing-day-wire-fraud-a-safe-wiring-procedure-for-your-firm/</loc><lastmod>2026-07-09</lastmod></url><url><loc>https://counselcyber.com/blog/five-questions-to-ask-any-ai-vendor-before-your-firm-signs/</loc><lastmod>2026-07-08</lastmod></url><url><loc>https://counselcyber.com/blog/document-management-for-small-firms-folders-dms-or-both/</loc><lastmod>2026-07-07</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-at-a-law-firm-a-hypothetical-hour-by-hour-walkthrough/</loc><lastmod>2026-07-06</lastmod></url><url><loc>https://counselcyber.com/blog/security-questionnaire-answers-that-wont-haunt-your-firm-later/</loc><lastmod>2026-07-05</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-1-comment-8-what-technology-competence-means-in-practice/</loc><lastmod>2026-07-04</lastmod></url><url><loc>https://counselcyber.com/blog/writing-an-ai-use-policy-your-associates-will-actually-follow/</loc><lastmod>2026-07-03</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-clean-up-your-clio-account-before-a-busy-season/</loc><lastmod>2026-07-02</lastmod></url><url><loc>https://counselcyber.com/blog/a-law-firm-security-checklist-for-the-second-half-of-the-year/</loc><lastmod>2026-07-01</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-renewal-readiness-a-90-day-plan-for-law-firms/</loc><lastmod>2026-06-30</lastmod></url><url><loc>https://counselcyber.com/blog/virtual-practice-and-aba-opinion-498-a-remote-work-checklist/</loc><lastmod>2026-06-29</lastmod></url><url><loc>https://counselcyber.com/blog/what-to-expect-in-a-quarterly-it-business-review-for-law-firms/</loc><lastmod>2026-06-28</lastmod></url><url><loc>https://counselcyber.com/blog/backing-up-microsoft-365-what-retention-settings-miss/</loc><lastmod>2026-06-27</lastmod></url><url><loc>https://counselcyber.com/blog/applying-zero-trust-ideas-in-a-ten-to-150-attorney-law-firm/</loc><lastmod>2026-06-26</lastmod></url><url><loc>https://counselcyber.com/blog/reading-your-cyber-policy-coverage-terms-law-firms-often-miss/</loc><lastmod>2026-06-25</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-6-c-in-plain-english-reasonable-efforts-for-small-firms/</loc><lastmod>2026-06-24</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-good-it-onboarding-and-offboarding-checklist-looks-like/</loc><lastmod>2026-06-23</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-recovery-for-law-firms-a-realistic-first-72-hours/</loc><lastmod>2026-06-22</lastmod></url><url><loc>https://counselcyber.com/blog/lookalike-domains-and-display-name-spoofing-spotting-fake-senders/</loc><lastmod>2026-06-21</lastmod></url><url><loc>https://counselcyber.com/blog/ai-hallucinations-in-legal-work-a-verification-checklist-for-firms/</loc><lastmod>2026-06-20</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-4-and-data-breaches-telling-clients-what-happened/</loc><lastmod>2026-06-19</lastmod></url><url><loc>https://counselcyber.com/blog/choosing-a-managed-it-provider-for-a-law-firm-a-buyer-s-guide/</loc><lastmod>2026-06-18</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-law-firm-disaster-recovery-plan-should-actually-contain/</loc><lastmod>2026-06-17</lastmod></url><url><loc>https://counselcyber.com/blog/dmarc-spf-and-dkim-explained-for-law-firm-administrators/</loc><lastmod>2026-06-16</lastmod></url><url><loc>https://counselcyber.com/blog/can-staff-paste-client-names-into-a-chatbot-an-ai-confidentiality-q-a/</loc><lastmod>2026-06-15</lastmod></url><url><loc>https://counselcyber.com/blog/automating-client-intake-without-exposing-sensitive-information/</loc><lastmod>2026-06-14</lastmod></url><url><loc>https://counselcyber.com/blog/securing-laptops-and-phones-your-attorneys-take-home/</loc><lastmod>2026-06-13</lastmod></url><url><loc>https://counselcyber.com/blog/the-3-2-1-backup-rule-explained-for-small-law-firm-environments/</loc><lastmod>2026-06-12</lastmod></url><url><loc>https://counselcyber.com/blog/wire-fraud-playbook-for-real-estate-and-closing-attorneys/</loc><lastmod>2026-06-11</lastmod></url><url><loc>https://counselcyber.com/blog/vetting-an-ai-vendor-questions-to-ask-before-you-sign-anything/</loc><lastmod>2026-06-10</lastmod></url><url><loc>https://counselcyber.com/blog/moving-your-law-firm-to-cloud-document-management-without-chaos/</loc><lastmod>2026-06-09</lastmod></url><url><loc>https://counselcyber.com/blog/ten-warning-signs-a-law-firm-email-account-has-been-compromised/</loc><lastmod>2026-06-08</lastmod></url><url><loc>https://counselcyber.com/blog/building-a-reusable-answer-library-for-client-security-reviews/</loc><lastmod>2026-06-07</lastmod></url><url><loc>https://counselcyber.com/blog/rule-5-3-and-your-it-vendor-supervising-nonlawyer-assistance/</loc><lastmod>2026-06-06</lastmod></url><url><loc>https://counselcyber.com/blog/writing-a-generative-ai-acceptable-use-policy-for-your-firm/</loc><lastmod>2026-06-05</lastmod></url><url><loc>https://counselcyber.com/blog/clio-permissions-and-security-settings-every-firm-should-review/</loc><lastmod>2026-06-04</lastmod></url><url><loc>https://counselcyber.com/blog/law-firm-password-policy-a-practical-outline-you-can-adopt/</loc><lastmod>2026-06-03</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-prepare-before-the-cyber-insurance-application-arrives/</loc><lastmod>2026-06-02</lastmod></url><url><loc>https://counselcyber.com/blog/what-aba-comment-8-means-for-your-firm-s-technology-habits/</loc><lastmod>2026-06-01</lastmod></url><url><loc>https://counselcyber.com/blog/budgeting-for-law-firm-it-where-the-money-should-go/</loc><lastmod>2026-05-31</lastmod></url><url><loc>https://counselcyber.com/blog/why-ransomware-crews-hunt-backups-first-immutability-explained/</loc><lastmod>2026-05-30</lastmod></url><url><loc>https://counselcyber.com/blog/security-keys-number-matching-and-sms-ranking-mfa-for-law-firms/</loc><lastmod>2026-05-29</lastmod></url><url><loc>https://counselcyber.com/blog/what-your-cyber-policy-covers-for-a-law-firm-and-where-gaps-hide/</loc><lastmod>2026-05-28</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-483-what-law-firms-must-consider-after-a-breach/</loc><lastmod>2026-05-27</lastmod></url><url><loc>https://counselcyber.com/blog/help-desk-metrics-a-law-firm-should-ask-its-it-provider-to-report/</loc><lastmod>2026-05-26</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-backup-for-law-firms-why-retention-is-not-a-backup/</loc><lastmod>2026-05-25</lastmod></url><url><loc>https://counselcyber.com/blog/mailbox-rules-and-forwarding-the-quiet-sign-of-a-hacked-email-account/</loc><lastmod>2026-05-24</lastmod></url><url><loc>https://counselcyber.com/blog/deepfakes-and-voice-cloning-a-risk-briefing-for-law-firms/</loc><lastmod>2026-05-23</lastmod></url><url><loc>https://counselcyber.com/blog/supervising-vendors-and-nonlawyers-rules-5-1-and-5-3-for-it-providers/</loc><lastmod>2026-05-22</lastmod></url><url><loc>https://counselcyber.com/blog/joiners-movers-and-leavers-account-lifecycle-for-law-firm-staff/</loc><lastmod>2026-05-21</lastmod></url><url><loc>https://counselcyber.com/blog/disaster-recovery-planning-for-a-small-law-firm-a-simple-template/</loc><lastmod>2026-05-20</lastmod></url><url><loc>https://counselcyber.com/blog/stopping-spoofing-of-your-law-firm-s-domain-with-email-authentication/</loc><lastmod>2026-05-19</lastmod></url><url><loc>https://counselcyber.com/blog/ai-transcription-and-meeting-notes-confidentiality-questions-to-ask/</loc><lastmod>2026-05-18</lastmod></url><url><loc>https://counselcyber.com/blog/building-a-client-intake-workflow-that-is-fast-and-secure/</loc><lastmod>2026-05-17</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-day-one-an-incident-commander-s-guide-for-law-firms/</loc><lastmod>2026-05-16</lastmod></url><url><loc>https://counselcyber.com/blog/restore-drills-a-monthly-quarterly-and-annual-testing-schedule/</loc><lastmod>2026-05-15</lastmod></url><url><loc>https://counselcyber.com/blog/wire-transfer-controls-for-law-firms-roles-approvals-and-recall/</loc><lastmod>2026-05-14</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-copilot-in-a-law-firm-fix-permissions-before-you-deploy/</loc><lastmod>2026-05-13</lastmod></url><url><loc>https://counselcyber.com/blog/migrating-to-a-new-practice-management-system-a-planning-guide/</loc><lastmod>2026-05-12</lastmod></url><url><loc>https://counselcyber.com/blog/why-law-firms-are-targets-and-what-attackers-want-from-you/</loc><lastmod>2026-05-11</lastmod></url><url><loc>https://counselcyber.com/blog/client-security-questionnaires-as-a-free-gap-analysis-for-your-firm/</loc><lastmod>2026-05-10</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-6-c-and-reasonable-efforts-to-protect-client-data/</loc><lastmod>2026-05-09</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-write-a-generative-ai-use-policy-for-your-law-firm/</loc><lastmod>2026-05-08</lastmod></url><url><loc>https://counselcyber.com/blog/security-settings-to-check-in-your-clio-or-practice-management-tool/</loc><lastmod>2026-05-07</lastmod></url><url><loc>https://counselcyber.com/blog/ten-security-habits-every-attorney-and-paralegal-should-follow/</loc><lastmod>2026-05-06</lastmod></url><url><loc>https://counselcyber.com/blog/the-evidence-folder-proving-your-controls-at-cyber-insurance-renewal/</loc><lastmod>2026-05-05</lastmod></url><url><loc>https://counselcyber.com/blog/competence-in-the-digital-age-habits-that-satisfy-comment-8/</loc><lastmod>2026-05-04</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-law-firm-managed-it-agreement-should-actually-cover/</loc><lastmod>2026-05-03</lastmod></url><url><loc>https://counselcyber.com/blog/three-copies-one-locked-backup-basics-for-law-firm-partners/</loc><lastmod>2026-05-02</lastmod></url><url><loc>https://counselcyber.com/blog/passkeys-authenticator-apps-and-sms-choosing-mfa-for-a-law-firm/</loc><lastmod>2026-05-01</lastmod></url><url><loc>https://counselcyber.com/blog/security-questionnaire-red-flags-terms-that-should-prompt-a-pause/</loc><lastmod>2026-04-30</lastmod></url><url><loc>https://counselcyber.com/blog/remote-and-hybrid-practice-confidentiality-away-from-the-office/</loc><lastmod>2026-04-29</lastmod></url><url><loc>https://counselcyber.com/blog/help-desk-metrics-a-law-firm-administrator-should-review-monthly/</loc><lastmod>2026-04-28</lastmod></url><url><loc>https://counselcyber.com/blog/is-your-microsoft-365-data-really-backed-up-a-law-firm-guide/</loc><lastmod>2026-04-27</lastmod></url><url><loc>https://counselcyber.com/blog/dmarc-spf-and-dkim-email-authentication-for-law-firm-domains/</loc><lastmod>2026-04-26</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-copilot-in-a-law-firm-permissions-come-before-the-pilot/</loc><lastmod>2026-04-25</lastmod></url><url><loc>https://counselcyber.com/blog/informed-consent-and-client-data-writing-better-engagement-letters/</loc><lastmod>2026-04-24</lastmod></url><url><loc>https://counselcyber.com/blog/law-firm-it-onboarding-and-offboarding-checklist-for-staff/</loc><lastmod>2026-04-23</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-recovery-timeline-what-the-first-72-hours-look-like/</loc><lastmod>2026-04-22</lastmod></url><url><loc>https://counselcyber.com/blog/spotting-fake-wire-instructions-red-flags-for-closing-staff/</loc><lastmod>2026-04-21</lastmod></url><url><loc>https://counselcyber.com/blog/ai-hallucinations-and-legal-research-a-verification-workflow/</loc><lastmod>2026-04-20</lastmod></url><url><loc>https://counselcyber.com/blog/moving-from-server-to-cloud-a-law-firm-migration-roadmap/</loc><lastmod>2026-04-19</lastmod></url><url><loc>https://counselcyber.com/blog/your-law-firms-security-awareness-training-what-actually-works/</loc><lastmod>2026-04-18</lastmod></url><url><loc>https://counselcyber.com/blog/rpo-and-rto-in-plain-english-setting-recovery-goals-for-your-firm/</loc><lastmod>2026-04-17</lastmod></url><url><loc>https://counselcyber.com/blog/the-call-back-rule-one-habit-that-stops-most-wire-fraud/</loc><lastmod>2026-04-16</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-transcription-in-law-firms-confidentiality-questions/</loc><lastmod>2026-04-15</lastmod></url><url><loc>https://counselcyber.com/blog/securing-your-practice-management-platform-a-settings-checklist/</loc><lastmod>2026-04-14</lastmod></url><url><loc>https://counselcyber.com/blog/email-account-takeover-at-a-law-firm-a-hypothetical-walkthrough/</loc><lastmod>2026-04-13</lastmod></url><url><loc>https://counselcyber.com/blog/who-pays-when-a-law-firm-is-breached-cyber-insurance-basics/</loc><lastmod>2026-04-12</lastmod></url><url><loc>https://counselcyber.com/blog/supervising-your-it-vendor-under-aba-model-rule-5-3/</loc><lastmod>2026-04-11</lastmod></url><url><loc>https://counselcyber.com/blog/a-generative-ai-policy-outline-for-small-and-mid-size-law-firms/</loc><lastmod>2026-04-10</lastmod></url><url><loc>https://counselcyber.com/blog/clio-netdocuments-or-imanage-how-to-choose-for-your-firm/</loc><lastmod>2026-04-09</lastmod></url><url><loc>https://counselcyber.com/blog/why-law-firms-are-targets-and-what-attackers-actually-want/</loc><lastmod>2026-04-08</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-applications-why-honest-answers-protect-the-firm/</loc><lastmod>2026-04-07</lastmod></url><url><loc>https://counselcyber.com/blog/model-rule-1-1-comment-8-technology-competence-in-practice/</loc><lastmod>2026-04-06</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-law-firm-should-expect-from-a-managed-it-provider/</loc><lastmod>2026-04-05</lastmod></url><url><loc>https://counselcyber.com/blog/the-3-2-1-backup-rule-explained-for-law-firms/</loc><lastmod>2026-04-04</lastmod></url><url><loc>https://counselcyber.com/blog/ten-quick-security-checks-a-law-firm-can-run-this-week/</loc><lastmod>2026-04-03</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-answer-a-client-security-questionnaire-without-guessing/</loc><lastmod>2026-04-02</lastmod></url><url><loc>https://counselcyber.com/blog/securing-client-communications-opinion-477r-in-everyday-practice/</loc><lastmod>2026-04-01</lastmod></url><url><loc>https://counselcyber.com/blog/quarterly-technology-reviews-what-law-firm-partners-should-ask/</loc><lastmod>2026-03-31</lastmod></url><url><loc>https://counselcyber.com/blog/retention-vs-backup-why-they-are-not-the-same-for-law-firms/</loc><lastmod>2026-03-30</lastmod></url><url><loc>https://counselcyber.com/blog/spf-dkim-and-dmarc-for-law-firms-what-they-do-and-how-to-set-them/</loc><lastmod>2026-03-29</lastmod></url><url><loc>https://counselcyber.com/blog/ai-hallucinations-in-legal-research-a-verification-workflow/</loc><lastmod>2026-03-28</lastmod></url><url><loc>https://counselcyber.com/blog/virtual-practice-and-opinion-498-a-remote-work-compliance-checklist/</loc><lastmod>2026-03-27</lastmod></url><url><loc>https://counselcyber.com/blog/break-fix-vs-managed-it-a-decision-framework-for-law-firms/</loc><lastmod>2026-03-26</lastmod></url><url><loc>https://counselcyber.com/blog/restore-testing-for-law-firms-how-how-often-and-what-to-record/</loc><lastmod>2026-03-25</lastmod></url><url><loc>https://counselcyber.com/blog/spotting-business-email-compromise-red-flags-for-legal-staff/</loc><lastmod>2026-03-24</lastmod></url><url><loc>https://counselcyber.com/blog/using-ai-meeting-transcription-in-a-law-firm-without-creating-risk/</loc><lastmod>2026-03-23</lastmod></url><url><loc>https://counselcyber.com/blog/document-management-hygiene-naming-permissions-and-retention/</loc><lastmod>2026-03-22</lastmod></url><url><loc>https://counselcyber.com/blog/myth-vs-reality-why-small-law-firms-are-attractive-targets/</loc><lastmod>2026-03-21</lastmod></url><url><loc>https://counselcyber.com/blog/disaster-recovery-planning-for-a-small-law-firm-in-five-steps/</loc><lastmod>2026-03-20</lastmod></url><url><loc>https://counselcyber.com/blog/a-call-back-procedure-that-stops-wire-fraud-at-real-estate-closings/</loc><lastmod>2026-03-19</lastmod></url><url><loc>https://counselcyber.com/blog/vetting-an-ai-vendor-ten-questions-before-you-upload-client-data/</loc><lastmod>2026-03-18</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-settings-every-law-firm-should-review-this-quarter/</loc><lastmod>2026-03-17</lastmod></url><url><loc>https://counselcyber.com/blog/security-awareness-training-that-attorneys-will-actually-complete/</loc><lastmod>2026-03-16</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-coverage-gaps-law-firms-often-overlook/</loc><lastmod>2026-03-15</lastmod></url><url><loc>https://counselcyber.com/blog/telling-clients-about-a-breach-rule-1-4-and-opinion-483-explained/</loc><lastmod>2026-03-14</lastmod></url><url><loc>https://counselcyber.com/blog/writing-an-ai-acceptable-use-policy-for-your-law-firm/</loc><lastmod>2026-03-13</lastmod></url><url><loc>https://counselcyber.com/blog/moving-to-cloud-practice-management-a-security-checklist/</loc><lastmod>2026-03-12</lastmod></url><url><loc>https://counselcyber.com/blog/a-hypothetical-ransomware-timeline-the-first-24-hours-at-a-law-firm/</loc><lastmod>2026-03-11</lastmod></url><url><loc>https://counselcyber.com/blog/answering-client-security-questionnaires-without-the-scramble/</loc><lastmod>2026-03-10</lastmod></url><url><loc>https://counselcyber.com/blog/technology-competence-and-comment-8-what-firms-should-actually-do/</loc><lastmod>2026-03-09</lastmod></url><url><loc>https://counselcyber.com/blog/attorney-onboarding-and-offboarding-an-it-checklist-for-firms/</loc><lastmod>2026-03-08</lastmod></url><url><loc>https://counselcyber.com/blog/the-3-2-1-1-0-backup-rule-explained-for-law-firms/</loc><lastmod>2026-03-07</lastmod></url><url><loc>https://counselcyber.com/blog/phishing-resistant-mfa-a-practical-guide-for-small-law-firms/</loc><lastmod>2026-03-06</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-prepare-for-your-cyber-insurance-renewal-application/</loc><lastmod>2026-03-05</lastmod></url><url><loc>https://counselcyber.com/blog/rule-5-3-and-your-it-vendor-supervising-nonlawyer-technology-help/</loc><lastmod>2026-03-04</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-law-firm-should-expect-from-a-managed-it-contract/</loc><lastmod>2026-03-03</lastmod></url><url><loc>https://counselcyber.com/blog/protecting-practice-management-data-backing-up-cloud-applications/</loc><lastmod>2026-03-02</lastmod></url><url><loc>https://counselcyber.com/blog/fake-invoices-and-vendor-fraud-protecting-firm-accounts-payable/</loc><lastmod>2026-03-01</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-notetakers-and-privilege-questions-to-ask-first/</loc><lastmod>2026-02-28</lastmod></url><url><loc>https://counselcyber.com/blog/duty-to-notify-what-aba-formal-opinion-483-says-about-breaches/</loc><lastmod>2026-02-27</lastmod></url><url><loc>https://counselcyber.com/blog/budgeting-for-it-at-a-small-law-firm-where-the-money-goes/</loc><lastmod>2026-02-26</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-recovery-walkthrough-for-a-hypothetical-law-firm/</loc><lastmod>2026-02-25</lastmod></url><url><loc>https://counselcyber.com/blog/securing-the-real-estate-closing-wire-process-at-a-law-firm/</loc><lastmod>2026-02-24</lastmod></url><url><loc>https://counselcyber.com/blog/myth-vs-reality-common-beliefs-about-ai-tools-in-law-firms/</loc><lastmod>2026-02-23</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-settings-law-firms-often-leave-unconfigured/</loc><lastmod>2026-02-22</lastmod></url><url><loc>https://counselcyber.com/blog/offboarding-checklist-closing-access-when-attorneys-and-staff-leave/</loc><lastmod>2026-02-21</lastmod></url><url><loc>https://counselcyber.com/blog/setting-rto-and-rpo-recovery-targets-for-your-law-firm/</loc><lastmod>2026-02-20</lastmod></url><url><loc>https://counselcyber.com/blog/business-email-compromise-red-flags-in-law-firm-inboxes/</loc><lastmod>2026-02-19</lastmod></url><url><loc>https://counselcyber.com/blog/vetting-ai-tools-before-client-data-goes-near-them/</loc><lastmod>2026-02-18</lastmod></url><url><loc>https://counselcyber.com/blog/planning-a-document-management-move-to-netdocuments-or-imanage/</loc><lastmod>2026-02-17</lastmod></url><url><loc>https://counselcyber.com/blog/endpoint-detection-and-response-vs-antivirus-for-law-firms/</loc><lastmod>2026-02-16</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-exclusions-law-firms-should-read-before-signing/</loc><lastmod>2026-02-15</lastmod></url><url><loc>https://counselcyber.com/blog/formal-opinion-477r-securing-client-email-and-communications/</loc><lastmod>2026-02-14</lastmod></url><url><loc>https://counselcyber.com/blog/a-section-by-section-outline-for-a-law-firm-ai-use-policy/</loc><lastmod>2026-02-13</lastmod></url><url><loc>https://counselcyber.com/blog/clio-security-settings-every-firm-administrator-should-review/</loc><lastmod>2026-02-12</lastmod></url><url><loc>https://counselcyber.com/blog/phishing-at-law-firms-common-lures-and-how-to-train-against-them/</loc><lastmod>2026-02-11</lastmod></url><url><loc>https://counselcyber.com/blog/answering-client-security-questionnaires-without-stalling-a-matter/</loc><lastmod>2026-02-10</lastmod></url><url><loc>https://counselcyber.com/blog/rule-5-3-and-your-it-vendors-supervising-nonlawyer-assistance/</loc><lastmod>2026-02-09</lastmod></url><url><loc>https://counselcyber.com/blog/help-desk-response-times-law-firms-should-expect-from-an-msp/</loc><lastmod>2026-02-08</lastmod></url><url><loc>https://counselcyber.com/blog/backup-testing-for-law-firms-how-to-prove-restores-really-work/</loc><lastmod>2026-02-07</lastmod></url><url><loc>https://counselcyber.com/blog/multi-factor-authentication-for-law-firms-where-to-turn-it-on-first/</loc><lastmod>2026-02-06</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-prepare-for-a-cyber-insurance-renewal-at-your-law-firm/</loc><lastmod>2026-02-05</lastmod></url><url><loc>https://counselcyber.com/blog/aba-model-rule-1-1-comment-8-what-tech-competence-means-for-firms/</loc><lastmod>2026-02-04</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-managed-it-service-agreement-should-include-for-law-firms/</loc><lastmod>2026-02-03</lastmod></url><url><loc>https://counselcyber.com/blog/the-3-2-1-backup-rule-explained-for-small-law-firms/</loc><lastmod>2026-02-02</lastmod></url><url><loc>https://counselcyber.com/blog/a-wire-instruction-verification-checklist-for-law-firm-staff/</loc><lastmod>2026-02-01</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-recorders-in-law-firms-privilege-and-privacy-risks/</loc><lastmod>2026-01-31</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-6-c-and-reasonable-efforts-building-a-defensible-program/</loc><lastmod>2026-01-30</lastmod></url><url><loc>https://counselcyber.com/blog/help-desk-reports-worth-reading-metrics-for-law-firm-it/</loc><lastmod>2026-01-29</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-backup-why-law-firms-need-a-separate-copy/</loc><lastmod>2026-01-28</lastmod></url><url><loc>https://counselcyber.com/blog/business-email-compromise-q-a-for-law-firm-administrators/</loc><lastmod>2026-01-27</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-512-in-plain-english-for-firm-leaders/</loc><lastmod>2026-01-26</lastmod></url><url><loc>https://counselcyber.com/blog/law-firm-software-inventory-mapping-every-app-with-client-data/</loc><lastmod>2026-01-25</lastmod></url><url><loc>https://counselcyber.com/blog/password-managers-for-law-firms-rolling-one-out-without-revolt/</loc><lastmod>2026-01-24</lastmod></url><url><loc>https://counselcyber.com/blog/a-hypothetical-ransomware-recovery-what-restoring-a-firm-takes/</loc><lastmod>2026-01-23</lastmod></url><url><loc>https://counselcyber.com/blog/spf-dkim-and-dmarc-email-authentication-for-law-firms/</loc><lastmod>2026-01-22</lastmod></url><url><loc>https://counselcyber.com/blog/shadow-ai-in-law-firms-how-to-find-it-and-fix-it/</loc><lastmod>2026-01-21</lastmod></url><url><loc>https://counselcyber.com/blog/choosing-a-document-management-system-security-questions-to-ask/</loc><lastmod>2026-01-20</lastmod></url><url><loc>https://counselcyber.com/blog/phishing-simulations-for-law-firms-running-them-without-backlash/</loc><lastmod>2026-01-19</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-myths-law-firm-administrators-still-believe/</loc><lastmod>2026-01-18</lastmod></url><url><loc>https://counselcyber.com/blog/aba-opinion-477r-and-email-when-standard-security-is-not-enough/</loc><lastmod>2026-01-17</lastmod></url><url><loc>https://counselcyber.com/blog/vetting-an-ai-vendor-questions-to-ask-before-client-data-goes-in/</loc><lastmod>2026-01-16</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-365-security-settings-law-firms-often-leave-off/</loc><lastmod>2026-01-15</lastmod></url><url><loc>https://counselcyber.com/blog/securing-remote-and-hybrid-attorneys-a-practical-checklist/</loc><lastmod>2026-01-14</lastmod></url><url><loc>https://counselcyber.com/blog/outside-counsel-guidelines-security-terms-hidden-in-client-contracts/</loc><lastmod>2026-01-13</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-483-in-plain-english-after-a-data-breach/</loc><lastmod>2026-01-12</lastmod></url><url><loc>https://counselcyber.com/blog/new-hire-and-departure-checklists-for-law-firm-it-access/</loc><lastmod>2026-01-11</lastmod></url><url><loc>https://counselcyber.com/blog/disaster-recovery-planning-for-law-firms-rto-rpo-and-priorities/</loc><lastmod>2026-01-10</lastmod></url><url><loc>https://counselcyber.com/blog/endpoint-detection-and-response-explained-for-law-firms/</loc><lastmod>2026-01-09</lastmod></url><url><loc>https://counselcyber.com/blog/reading-your-cyber-policy-conditions-and-exclusions-to-check/</loc><lastmod>2026-01-08</lastmod></url><url><loc>https://counselcyber.com/blog/rule-5-1-and-partner-responsibility-for-firm-cybersecurity/</loc><lastmod>2026-01-07</lastmod></url><url><loc>https://counselcyber.com/blog/what-managed-it-really-costs-a-small-law-firm-a-budget-guide/</loc><lastmod>2026-01-06</lastmod></url><url><loc>https://counselcyber.com/blog/how-long-should-a-law-firm-keep-its-backups-a-retention-guide/</loc><lastmod>2026-01-05</lastmod></url><url><loc>https://counselcyber.com/blog/when-the-other-side-s-hacked-inbox-puts-your-closing-at-risk/</loc><lastmod>2026-01-04</lastmod></url><url><loc>https://counselcyber.com/blog/safe-prompting-habits-what-attorneys-should-never-paste-into-ai/</loc><lastmod>2026-01-03</lastmod></url><url><loc>https://counselcyber.com/blog/a-ten-question-technology-competence-self-audit-for-firms/</loc><lastmod>2026-01-02</lastmod></url><url><loc>https://counselcyber.com/blog/planning-your-law-firm-s-it-budget-what-to-include-and-why/</loc><lastmod>2026-01-01</lastmod></url><url><loc>https://counselcyber.com/blog/a-new-year-resolution-list-for-law-firm-backup-and-recovery/</loc><lastmod>2025-12-31</lastmod></url><url><loc>https://counselcyber.com/blog/fake-invoices-and-vendor-email-compromise-protecting-firm-accounts/</loc><lastmod>2025-12-30</lastmod></url><url><loc>https://counselcyber.com/blog/seven-generative-ai-myths-that-put-law-firms-at-risk/</loc><lastmod>2025-12-29</lastmod></url><url><loc>https://counselcyber.com/blog/vetting-third-party-apps-before-you-connect-them-to-clio/</loc><lastmod>2025-12-28</lastmod></url><url><loc>https://counselcyber.com/blog/year-end-security-review-a-twelve-point-checklist-for-law-firms/</loc><lastmod>2025-12-27</lastmod></url><url><loc>https://counselcyber.com/blog/questions-to-ask-your-backup-vendor-before-your-firm-renews/</loc><lastmod>2025-12-26</lastmod></url><url><loc>https://counselcyber.com/blog/holiday-season-scams-aimed-at-law-firms-what-staff-should-watch-for/</loc><lastmod>2025-12-25</lastmod></url><url><loc>https://counselcyber.com/blog/ai-hallucinations-in-legal-work-a-verification-workflow-for-firms/</loc><lastmod>2025-12-24</lastmod></url><url><loc>https://counselcyber.com/blog/document-management-hygiene-naming-permissions-and-cleanup/</loc><lastmod>2025-12-23</lastmod></url><url><loc>https://counselcyber.com/blog/ten-microsoft-365-security-settings-every-law-firm-should-check/</loc><lastmod>2025-12-22</lastmod></url><url><loc>https://counselcyber.com/blog/security-controls-that-help-a-law-firm-qualify-for-cyber-coverage/</loc><lastmod>2025-12-21</lastmod></url><url><loc>https://counselcyber.com/blog/remote-work-and-aba-opinion-498-a-security-checklist-for-firms/</loc><lastmod>2025-12-20</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-note-takers-and-privilege-what-law-firms-should-ask/</loc><lastmod>2025-12-19</lastmod></url><url><loc>https://counselcyber.com/blog/moving-to-a-cloud-practice-management-platform-a-security-plan/</loc><lastmod>2025-12-18</lastmod></url><url><loc>https://counselcyber.com/blog/phishing-red-flags-attorneys-miss-a-training-guide-for-law-firms/</loc><lastmod>2025-12-17</lastmod></url><url><loc>https://counselcyber.com/blog/build-a-reusable-answer-library-for-client-security-questionnaires/</loc><lastmod>2025-12-16</lastmod></url><url><loc>https://counselcyber.com/blog/aba-opinion-483-explained-lawyer-duties-after-a-data-breach/</loc><lastmod>2025-12-15</lastmod></url><url><loc>https://counselcyber.com/blog/reading-your-it-provider-s-monthly-report-numbers-that-matter/</loc><lastmod>2025-12-14</lastmod></url><url><loc>https://counselcyber.com/blog/retention-and-backups-how-long-should-a-law-firm-keep-its-data/</loc><lastmod>2025-12-13</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-at-a-law-firm-what-to-do-in-the-first-hour/</loc><lastmod>2025-12-12</lastmod></url><url><loc>https://counselcyber.com/blog/reading-your-cyber-policy-exclusions-sublimits-and-conditions/</loc><lastmod>2025-12-11</lastmod></url><url><loc>https://counselcyber.com/blog/rule-1-6-c-and-reasonable-efforts-a-safeguards-checklist-for-firms/</loc><lastmod>2025-12-10</lastmod></url><url><loc>https://counselcyber.com/blog/new-attorney-onboarding-a-day-one-it-checklist-for-law-firms/</loc><lastmod>2025-12-09</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-test-your-law-firm-s-backups-without-disrupting-work/</loc><lastmod>2025-12-08</lastmod></url><url><loc>https://counselcyber.com/blog/anatomy-of-a-closing-day-wire-fraud-attempt-and-how-to-stop-it/</loc><lastmod>2025-12-07</lastmod></url><url><loc>https://counselcyber.com/blog/building-a-sanctioned-ai-toolkit-instead-of-banning-chatgpt/</loc><lastmod>2025-12-06</lastmod></url><url><loc>https://counselcyber.com/blog/turning-aba-comment-8-into-a-technology-review-you-can-document/</loc><lastmod>2025-12-05</lastmod></url><url><loc>https://counselcyber.com/blog/choosing-a-managed-it-provider-a-law-firm-buyer-s-guide/</loc><lastmod>2025-12-04</lastmod></url><url><loc>https://counselcyber.com/blog/backup-basics-for-law-firms-three-copies-two-media-one-offsite/</loc><lastmod>2025-12-03</lastmod></url><url><loc>https://counselcyber.com/blog/business-email-compromise-an-incident-walkthrough-for-law-firms/</loc><lastmod>2025-12-02</lastmod></url><url><loc>https://counselcyber.com/blog/client-data-and-public-ai-tools-rules-to-teach-your-staff-today/</loc><lastmod>2025-12-01</lastmod></url><url><loc>https://counselcyber.com/blog/moving-to-the-cloud-a-law-firm-migration-plan-step-by-step/</loc><lastmod>2025-11-30</lastmod></url><url><loc>https://counselcyber.com/blog/securing-remote-and-hybrid-work-at-a-law-firm-a-practical-guide/</loc><lastmod>2025-11-29</lastmod></url><url><loc>https://counselcyber.com/blog/does-your-law-firm-need-to-back-up-microsoft-365-myth-vs-reality/</loc><lastmod>2025-11-28</lastmod></url><url><loc>https://counselcyber.com/blog/holiday-week-fraud-alert-closings-wires-and-skeleton-staff/</loc><lastmod>2025-11-27</lastmod></url><url><loc>https://counselcyber.com/blog/microsoft-copilot-in-a-law-firm-permissions-cleanup-comes-first/</loc><lastmod>2025-11-26</lastmod></url><url><loc>https://counselcyber.com/blog/document-management-for-law-firms-folder-structure-and-permissions/</loc><lastmod>2025-11-25</lastmod></url><url><loc>https://counselcyber.com/blog/endpoint-detection-and-response-what-law-firms-actually-need/</loc><lastmod>2025-11-24</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-renewal-checklist-for-law-firms/</loc><lastmod>2025-11-23</lastmod></url><url><loc>https://counselcyber.com/blog/texas-oklahoma-and-beyond-checking-your-state-bar-s-tech-guidance/</loc><lastmod>2025-11-22</lastmod></url><url><loc>https://counselcyber.com/blog/fake-case-citations-how-law-firms-can-verify-ai-assisted-research/</loc><lastmod>2025-11-21</lastmod></url><url><loc>https://counselcyber.com/blog/choosing-practice-management-software-a-security-checklist/</loc><lastmod>2025-11-20</lastmod></url><url><loc>https://counselcyber.com/blog/ten-phishing-red-flags-every-law-firm-employee-should-know/</loc><lastmod>2025-11-19</lastmod></url><url><loc>https://counselcyber.com/blog/how-to-answer-client-security-questionnaires-honestly/</loc><lastmod>2025-11-18</lastmod></url><url><loc>https://counselcyber.com/blog/supervising-vendors-and-staff-rules-5-1-and-5-3-for-it-security/</loc><lastmod>2025-11-17</lastmod></url><url><loc>https://counselcyber.com/blog/it-budgeting-for-a-small-law-firm-where-the-money-should-go/</loc><lastmod>2025-11-16</lastmod></url><url><loc>https://counselcyber.com/blog/disaster-recovery-plan-template-outline-for-small-law-firms/</loc><lastmod>2025-11-15</lastmod></url><url><loc>https://counselcyber.com/blog/multi-factor-authentication-for-law-firms-beyond-text-messages/</loc><lastmod>2025-11-14</lastmod></url><url><loc>https://counselcyber.com/blog/what-cyber-insurance-applications-ask-law-firms-to-prove/</loc><lastmod>2025-11-13</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-483-what-law-firms-should-do-after-a-breach/</loc><lastmod>2025-11-12</lastmod></url><url><loc>https://counselcyber.com/blog/a-law-firm-employee-onboarding-and-offboarding-it-checklist/</loc><lastmod>2025-11-11</lastmod></url><url><loc>https://counselcyber.com/blog/ransomware-proof-backups-immutability-and-offline-copies/</loc><lastmod>2025-11-10</lastmod></url><url><loc>https://counselcyber.com/blog/spotting-lookalike-domains-before-they-fool-your-staff/</loc><lastmod>2025-11-09</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-notetakers-in-law-firms-risks-to-check-first/</loc><lastmod>2025-11-08</lastmod></url><url><loc>https://counselcyber.com/blog/technology-competence-for-lawyers-rule-1-1-comment-8-in-practice/</loc><lastmod>2025-11-07</lastmod></url><url><loc>https://counselcyber.com/blog/what-your-law-firm-should-expect-from-a-managed-it-provider/</loc><lastmod>2025-11-06</lastmod></url><url><loc>https://counselcyber.com/blog/3-2-1-backups-for-law-firms-what-the-rule-means-today/</loc><lastmod>2025-11-05</lastmod></url><url><loc>https://counselcyber.com/blog/the-wire-fraud-callback-rule-one-phone-call-that-saves-closings/</loc><lastmod>2025-11-04</lastmod></url><url><loc>https://counselcyber.com/blog/a-generative-ai-use-policy-outline-for-your-law-firm/</loc><lastmod>2025-11-03</lastmod></url><url><loc>https://counselcyber.com/blog/ethical-walls-in-practice-management-tools-permissions-in-practice/</loc><lastmod>2025-11-02</lastmod></url><url><loc>https://counselcyber.com/blog/building-a-one-page-incident-response-plan-for-a-small-law-firm/</loc><lastmod>2025-11-01</lastmod></url><url><loc>https://counselcyber.com/blog/is-microsoft-365-backed-up-what-law-firms-often-assume/</loc><lastmod>2025-10-31</lastmod></url><url><loc>https://counselcyber.com/blog/email-authentication-for-law-firms-spf-dkim-and-dmarc-explained/</loc><lastmod>2025-10-30</lastmod></url><url><loc>https://counselcyber.com/blog/ai-meeting-notetakers-in-law-firms-privilege-and-confidentiality/</loc><lastmod>2025-10-29</lastmod></url><url><loc>https://counselcyber.com/blog/remote-access-to-practice-management-systems-a-secure-setup-guide/</loc><lastmod>2025-10-28</lastmod></url><url><loc>https://counselcyber.com/blog/endpoint-detection-and-response-vs-antivirus-q-a-for-law-firms/</loc><lastmod>2025-10-27</lastmod></url><url><loc>https://counselcyber.com/blog/reading-your-cyber-insurance-policy-what-law-firms-should-check/</loc><lastmod>2025-10-26</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-477r-when-email-is-enough-and-when-it-is-not/</loc><lastmod>2025-10-25</lastmod></url><url><loc>https://counselcyber.com/blog/using-microsoft-copilot-in-a-law-firm-fix-permissions-first/</loc><lastmod>2025-10-24</lastmod></url><url><loc>https://counselcyber.com/blog/document-management-cleanup-before-you-migrate-to-a-new-system/</loc><lastmod>2025-10-23</lastmod></url><url><loc>https://counselcyber.com/blog/phishing-at-law-firms-five-myths-and-what-is-actually-true/</loc><lastmod>2025-10-22</lastmod></url><url><loc>https://counselcyber.com/blog/answering-client-security-questionnaires-without-starting-over/</loc><lastmod>2025-10-21</lastmod></url><url><loc>https://counselcyber.com/blog/aba-formal-opinion-483-and-the-duty-to-respond-to-a-data-breach/</loc><lastmod>2025-10-20</lastmod></url><url><loc>https://counselcyber.com/blog/onboarding-and-offboarding-attorneys-a-practical-it-checklist/</loc><lastmod>2025-10-19</lastmod></url><url><loc>https://counselcyber.com/blog/recovery-time-and-recovery-point-goals-in-plain-english-for-firms/</loc><lastmod>2025-10-18</lastmod></url><url><loc>https://counselcyber.com/blog/mfa-for-law-firms-which-methods-to-use-and-which-to-retire/</loc><lastmod>2025-10-17</lastmod></url><url><loc>https://counselcyber.com/blog/cyber-insurance-applications-what-underwriters-ask-law-firms/</loc><lastmod>2025-10-16</lastmod></url><url><loc>https://counselcyber.com/blog/model-rule-5-3-and-your-vendors-supervising-outside-it-help/</loc><lastmod>2025-10-15</lastmod></url><url><loc>https://counselcyber.com/blog/help-desk-metrics-a-law-firm-administrator-should-actually-track/</loc><lastmod>2025-10-14</lastmod></url><url><loc>https://counselcyber.com/blog/backup-testing-for-law-firms-how-to-prove-your-restores-work/</loc><lastmod>2025-10-13</lastmod></url><url><loc>https://counselcyber.com/blog/spotting-business-email-compromise-a-staff-training-guide/</loc><lastmod>2025-10-12</lastmod></url><url><loc>https://counselcyber.com/blog/five-questions-to-ask-before-your-attorneys-use-an-ai-tool/</loc><lastmod>2025-10-11</lastmod></url><url><loc>https://counselcyber.com/blog/technology-competence-under-model-rule-1-1-comment-8-explained/</loc><lastmod>2025-10-10</lastmod></url><url><loc>https://counselcyber.com/blog/what-a-managed-it-agreement-for-a-law-firm-should-actually-cover/</loc><lastmod>2025-10-09</lastmod></url><url><loc>https://counselcyber.com/blog/the-3-2-1-backup-rule-applied-to-a-law-firm-environment/</loc><lastmod>2025-10-08</lastmod></url><url><loc>https://counselcyber.com/blog/how-closing-wire-fraud-works-and-where-firms-get-fooled/</loc><lastmod>2025-10-07</lastmod></url><url><loc>https://counselcyber.com/blog/writing-a-generative-ai-policy-for-your-law-firm-an-outline/</loc><lastmod>2025-10-06</lastmod></url><url><loc>https://counselcyber.com/blog/locking-down-your-practice-management-platform-an-admin-checklist/</loc><lastmod>2025-10-05</lastmod></url><url><loc>https://counselcyber.com/blog/a-practical-security-baseline-for-small-and-mid-size-law-firms/</loc><lastmod>2025-10-04</lastmod></url></urlset>
