The thought of a cyberattack strikes fear into the hearts of law firms every day. Yet rarely do partners take the necessary step back and ask: why are breaches having such an impact? The answer is simple—and so is the solution.
Breaches have a profound impact because firms are overly focused on securing their networks and data at the perimeter and not focused enough on what happens after an intruder gains a foothold. History shows that it is not a question of if but when an intruder will break through an organization’s network defenses. This is what people mean when they say, “assume breach.” Security capabilities like multifactor authentication and firewalls help keep intruders out by securing the perimeter: closing off points of entry wherever possible. But intruders will break through—especially if they are a well-funded organization in a nation-state with hackers on salary.
