While a security system can operate passively in the background of daily operations, so too can clandestine hackers. It is a worrisome truth facing many law firms and legal departments, and being ready to handle a breach at a moment’s notice is essential for anyone doing business in the digital age. But it isn’t one that is easily executed.

At Legaltech West Coast’s “Incident Readiness: The Role of Information Governance in Mitigating Breach Exposure session,” Jeff Beard, information lifecycle governance consultant at IBM, said that getting companies to understand the real potential for breaches was half the battle. The main problem with training employees, he explained, “is breaking through [the idea that] this is a theoretical exercise when it’s really not. These are real concerns, these are real events that happens. It’s no longer just a ‘what if’ discussion.”