{"id":4617,"date":"2021-10-05T19:21:17","date_gmt":"2021-10-05T16:21:17","guid":{"rendered":"https:\/\/www.endpointprotector.com\/blog\/?p=4617"},"modified":"2022-09-02T17:31:16","modified_gmt":"2022-09-02T14:31:16","slug":"security-briefing-wrap-up-protecting-your-law-firms-reputation-with-data-loss-prevention","status":"publish","type":"post","link":"https:\/\/www.endpointprotector.com\/blog\/security-briefing-wrap-up-protecting-your-law-firms-reputation-with-data-loss-prevention\/","title":{"rendered":"Security Briefing Wrap-Up: Protecting Your Law Firms\u2019 Reputation with Data Loss Prevention"},"content":{"rendered":"<p>Law firms have unique data security challenges, and keeping sensitive information protected is increasingly difficult.<\/p>\n<div style=\"padding:56.25% 0 0 0;position:relative;\">\n<h2><iframe src=\"https:\/\/player.vimeo.com\/video\/709476496?h=5027c64e38&amp;badge=0&amp;autopause=0&amp;player_id=0&amp;app_id=58479\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture\" allowfullscreen style=\"position:absolute;top:0;left:0;width:100%;height:100%;\" title=\"Data Protection for Law Firms\"><\/iframe><\/h2>\n<\/div>\n<p><script src=\"https:\/\/player.vimeo.com\/api\/player.js\"><\/script><\/p>\n<p>With the exponential growth of data that companies have to handle, the risks have also risen. Security breaches can have devastating effects, including hefty fines and damaged reputation, on law firms and any company that has confidentiality at the heart of its business.<\/p>\n<p>In this month\u2019s live Security Briefing, we focused on the unique challenges that the legal industry faces and presented how <a href=\"https:\/\/www.endpointprotector.com\/solutions\/law\" target=\"_blank\" rel=\"noopener\">Data Loss Prevention (DLP)<\/a> tools can help to better protect confidential information and prevent data breaches.<\/p>\n<p>This time our speakers included Tim Deluca-Smith (Chief Marketing Officer at CoSoSys), Chris Roney (Data Security Specialist at CoSoSys), and Daryl Craig (Director Information Technology at <a href=\"https:\/\/www.litigate.com\/\" target=\"_blank\" rel=\"noopener\">Lenczner Slaght<\/a>), who has over 25 years of experience in legal IT. They have discussed the threats law firms need to be aware of, data types they have to protect, and best practices to successfully deploy a DLP strategy.<\/p>\n<h2>Key insights from our Security Briefing<\/h2>\n<p>Here are some of the most important highlights from the Security Briefing.<\/p>\n<h3>More than 50% of data breaches are still caused by employee negligence.<\/h3>\n<p>While from the news, we might get the idea that malicious outsiders are the ones who usually cause data breaches, the reality is that over half of the security incidents happen due to malicious or careless employees.<\/p>\n<blockquote><p>\u201cOnce a company that was breached hits the news cycle, it usually appears as some kind of malicious actor did it. In reality, a lot of times, it\u2019s an employee who was careless with a USB drive, or maybe they were disgruntled when they went somewhere else,\u201d Chris said.<\/p><\/blockquote>\n<p>Many times data loss can happen due to simple, everyday actions, such as copying sensitive data to an unsecure USB drive, printing it, sending an email to the wrong person, or sharing it over instant messaging apps.<\/p>\n<blockquote><p>\u201cNot all things are nefarious intentionally; they could be accidental. The majority of these insider-caused events are accidental. But it\u2019s very hard to get really good data on that. We\u2019ve got this data that says that more than 50% are insider breaches. That number might be even a lot higher, but it\u2019s hard to know,\u201d he added.<\/p><\/blockquote>\n<h3>Security focus has moved from where data is stored to exit points.<\/h3>\n<p>Usually, when we think about data, we think about files. However, this perspective is changing as data travels more and more both within and outside companies. Thus, it\u2019s getting vital to think about where sensitive data can go and which are the possible exit points.<\/p>\n<blockquote><p>\u201cThe sheer amount of applications that we use in our daily lives now that we\u2019re using our laptops means that the flow of information is a frictionless experience, and it\u2019s very easy to share information. So, I think less about actual data and more about potential exit points,\u201d &#8211; Tim mentioned.<\/p><\/blockquote>\n<p>These exit points include emails, external drives, cloud storage, printers, collaboration tools such as Slack and Microsoft Teams, copy-pasting information and sharing it with a geographically dispersed team, and more.<\/p>\n<blockquote><p>\u201cMany law firms accelerated the rollout of Microsoft Teams when the pandemic hit. It\u2019s one of the common standards for law firms now. And many organizations didn\u2019t have a DLP that could actually monitor the data shared in Teams. Systems weren\u2019t designed to secure Teams,\u201d &#8211; Daryl added.<\/p><\/blockquote>\n<p>And the goal of a DLP solution is precisely this: <a href=\"https:\/\/www.endpointprotector.com\/blog\/how-dlp-helps-law-firms-protect-their-data\/\" target=\"_blank\" rel=\"noopener\">to protect your firm from data loss or data theft<\/a> through these possible exit points by giving IT admins the control they need.<\/p>\n<h3>Law firms are unique from a DLP standpoint.<\/h3>\n<p>Every industry has different challenges and requirements in terms of data security. As Chris resumes, law firms \u201chave different expectations of privacy, trust, flexibility, and the ability to do things\u201d. All of the above make them unique from a DLP standpoint.<\/p>\n<p>Law firms need to be aware of and safeguard three main types of sensitive data. Besides confidential client information that is typically unstructured and <a href=\"https:\/\/www.endpointprotector.com\/solutions\/ediscovery\/pii-scanner\" target=\"_blank\" rel=\"noopener\">Personally Identifiable Information<\/a> (PII) protected by laws, there is a third type of data that businesses often forget about: Intellectual<a href=\"https:\/\/www.endpointprotector.com\/blog\/3-steps-to-protect-intellectual-property\/\" target=\"_blank\" rel=\"noopener\">\u00a0Property<\/a> (IP).<\/p>\n<blockquote><p>\u201cCompanies don\u2019t necessarily consider it sensitive information, although they usually work very hard to differentiate themselves. This intellectual property &#8211; whether it\u2019s employee training guides, how they onboard clients, the processes they use &#8211; is directly associated with profitability and often is the kind of data and information that leaves the company,\u201d &#8211; Tim highlighted.<\/p><\/blockquote>\n<p>When deploying a DLP solution, it\u2019s essential to get more people involved, such as board members, and conduct focus groups and pilots. And it\u2019s just as important to take things slowly.<\/p>\n<blockquote><p>\u201cPut DLP in monitoring mode first. Turn it on for 3, 6 months and track everything and then slowly lock things down. For example, we didn\u2019t turn on much at first, and we didn\u2019t even block the actions. It was just a warning that this action is monitored and tracked,\u201d &#8211; Daryl explained.<\/p><\/blockquote>\n<p>DLP tools for law firms need to have the ability to control things but also provide granularity and allow employees to perform their duties. For these firms, it\u2019s also vital to have the option to monitor and control devices even if they are not connected to the internet and offer the possibility to manage printers.<\/p>\n<h2>Watch the Security Briefing and learn more about:<\/h2>\n<ul>\n<li aria-level=\"1\">What is DLP and why it\u2019s more important than ever before for the legal profession [<a href=\"https:\/\/youtu.be\/P-JDfKQpUH0\" target=\"_blank\" rel=\"noopener\">3:33<\/a>]<\/li>\n<li aria-level=\"1\">The potential exit points of sensitive data [<a href=\"https:\/\/youtu.be\/P-JDfKQpUH0?t=579\" target=\"_blank\" rel=\"noopener\">9:39<\/a>]<\/li>\n<li aria-level=\"1\">The types of data that need to be protected [<a href=\"https:\/\/youtu.be\/P-JDfKQpUH0?t=1080\" target=\"_blank\" rel=\"noopener\">18:01<\/a>]<\/li>\n<li aria-level=\"1\">Key security challenges in the legal profession [<a href=\"https:\/\/www.youtube.com\/watch?v=P-JDfKQpUH0&amp;t=1312s\" target=\"_blank\" rel=\"noopener\">21:52<\/a>]<\/li>\n<li aria-level=\"1\">How to deploy a DLP strategy successfully [<a href=\"https:\/\/youtu.be\/P-JDfKQpUH0?t=1807\" target=\"_blank\" rel=\"noopener\">30:07]<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Law firms have unique data security challenges, and keeping sensitive information protected is increasingly difficult. With the exponential growth of data that companies have to handle, the risks have also risen. Security breaches can have devastating effects, including hefty fines and damaged reputation, on law firms and any company that has confidentiality at the heart &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.endpointprotector.com\/blog\/security-briefing-wrap-up-protecting-your-law-firms-reputation-with-data-loss-prevention\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Security Briefing Wrap-Up: Protecting Your Law Firms\u2019 Reputation with Data Loss Prevention&#8221;<\/span><\/a><\/p>\n","protected":false},"author":12,"featured_media":4620,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1,171,189],"tags":[],"class_list":["post-4617","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-loss-prevention","category-law-firms","category-security-briefings","entry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/4617","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/comments?post=4617"}],"version-history":[{"count":10,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/4617\/revisions"}],"predecessor-version":[{"id":6193,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/4617\/revisions\/6193"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media\/4620"}],"wp:attachment":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media?parent=4617"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/categories?post=4617"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/tags?post=4617"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}