Editor’s note: This is the third installment in a series on law firms’ efforts to secure client data.

Despite the risk-averse nature generally associated with the legal industry, many law firms do not view themselves as at risk for a data breach and, therefore, have not purchased what is known as cyberinsurance. The lawyers in firms whose practice is concentrated in data security see this as a mistake given what they say is the “if, not when” likelihood of a firm being breached.