In February 2013, Joe Patrice wrote inAbove The Law that law firms were the “soft underbelly of American cybersecurity.” Today, it is safe to say that many law firms across the U.S., Canada and Europe take exception to that characterization. Why? In part due to the efforts of individual firms to adopt ISO 27001 security standards or implement more robust security programs, including information security education.

Also in February 2013 the former special agent in charge of cyber and special operations with the FBI’s New York office, Mary Galligan, stated “We have hundreds of law firms that we see increasingly being targeted by hackers.”