It’s unfortunate, but power drills, hammers and screwdrivers won’t fix the data security problems that a lot of companies face. However, with its new “Data Breach Toolkit,” law firm Steptoe & Johnson LLP has introduced a different set of tools—based on legal experience—that may help companies get on track when it comes to combating data breaches, and mitigating their negative impact.

The tool kit has three sections. The first two, “Before a Breach Occurs” and “After a Breach Occurs,” contain specific checklists for companies to follow to make sure they are ready for whatever data breach threats might come their way. The final section is a road map that provides information about data breach statutes around the U.S.