Fall 2017 issue of Horizons

As many details as possible should be included in order to provide clear communication on the breach to the firm’s partners, employees, clients and, if necessary, the public. The developments in recent months have placed an emphasis on the importance of having such a plan in place. In addition, firms that already have a response plan in place should keep them current and test them on a periodic basis to ensure optimization. Provide Regular, Recurring Security and Privacy Training In today’s environment, cyber security threats are constantly changing and becoming more prevalent.

The recent ransomware attacks were conducted in a manner that used social engineering to penetrate firms’ systems by sending links via email to individual users. Seemingly harmless email messages actually containing harmful links can cause massive business interruptions. Training on trends in cyber security threats should not just be provided to a firm’s IT staff, but delivered to the firm’s entire staff in order to help the team understand how to best keep client information safe.

LAW FIRMS SERVICES GROUP

RubinBrown has a dedicated business unit to serve the unique needs of law firms staffed with professionals experienced in working with service-focused organizations. For more information, visit www.RubinBrown.com/Law-Firms .

Matt Finke, CPA, CGMA Partner-In-Charge Law Firms Services Group 314.290.3365 matt.finke@rubinbrown.com

Kristin Bettorf, CPA Partner & Vice Chair Law Firms Services Group 314.290.3416 kristin.bettorf@rubinbrown.com

Cyber Security: What Law Firm Leaders Need to Know

36