E-discovery is all about identifying data—some of it sensitive—and moving it through a cycle with a number of touch points both inside and outside a company. And if there’s one thing that the business world has learned about transferring data in the last few years, it’s that cybersecurity problems can, do and will happen.

The most recent Advice From Counsel study from FTI Consulting, titled “Measuring Your E-Discovery Program Against Industry 2015,” shows that perhaps not all in-house counsel and the companies they serve are being as cautious as they could when providing data security around a potentially vulnerable link in the e-discovery process: law firms. The study of in-house counsel from Fortune 1000 organizations also contains information about data retention, in-house staffing and other aspects of changing corporate e-discovery regimes.