You’ve got to love report card season. LogicForce, a legal IT consulting company, released the results from its most recent Law Firm Cybersecurity Scoreboard, and it seems that some firms are just not applying themselves.

The survey indicates that while cybersecurity practices across the legal industry are generally improving, many firms have yet to deploy important protocols such as multi-factor authentication or putting a security executive on the payroll. Still, this might say more about the state of client expectations than it does about how willing their lawyers are to adapt to evolving cyber threats.