When you talk about corporate legal operations and cybersecurity, you aren’t just talking about data housed in the company itself. An important—and depending on whom you ask, perhaps the most important—aspect of corporate legal cybersecurity has to do with data that travels outside the organization, to law firms and other outside third-party companies.
“We give law firms many of the most important emails we have, and many of those come from the C-suite. But there’s a history of law firms being subject to these attacks,” noted Gary Tully, head of legal operations at Gilead Sciences. “There seems to be this perception in the in-house departments that I’ve worked in that law firms will act responsibility … but I think there’s a misconception out there of what law firms are capable of doing.”
