Legal professionals have been hearing the same battle cries for some time now: protect yourself, and cyberattacks are more advanced than ever, and reaching record levels. But how does one go about this? Surely, one with a heavily invested cybersecurity infrastructure is insulated from the worst criminals on the deep web, right?

It is a simple proposition, but one that belies the nature of cyberthreats. For nothing in cyberattacks is direct or easy — and for many U.S. business, according to Tech Sentry’s and IDG Connect’s “Strong Security Needs Flexible Software Tools” survey of 211 U.S.-based IT staff, spending big on cybersecurity does not always equate to protection.