Despite many in-house counsel and law firms finally awakening to the current realities of cybersecurity, many still aren’t aware of all the places through which intruders can make their way into the organization. Third-party companies are perhaps the biggest blind spot—a fall 2016 ALM Intelligence survey found that only 6 percent of firms regularly audited third-party vendors’ security protections, and 54 percent do not audit any vendors at all.

This should raise alarm bells not only for the legal department as a whole, but particularly for e-discovery experts. E-discovery companies, after all, hold a trove of crucial—often confidential—litigation data that, if hacked, could pose major risks to the organization.