Cybersecurity & Client Data Protection for Attorneys

ABA ethics obligations meet cybersecurity practice. Covers technology competence duties, threat landscape for law firms, client data classification, email security, cloud vendor risk, incident response, and building a security culture.

8 Units

Early Units (Foundation)

Building Skills

Advanced Concepts

Capstone/Synthesis

The Duty of Competence and Cybersecurity

Examines the ethical foundation for attorney cybersecurity obligations through ABA opinions, state ethics rules, and disciplinary precedent.

20 minutes

The Threat Landscape for Law Firms

Surveys the cyber threat environment for legal practices, including ransomware, business email compromise, nation-state espionage, and insider threats.

20 minutes

Client Data Classification and Protection

Analyzes the classification of client data including PII, PHI, trade secrets, and privileged communications, with corresponding encryption and handling requirements.

20 minutes

Email Security and Confidentiality

Addresses email security protocols for attorneys, including encryption standards, metadata management, inadvertent disclosure, and privilege waiver risks.

20 minutes

Cloud Services and Vendor Risk Management

Examines vendor risk management for cloud services, including SaaS agreements, BAAs, data sovereignty, vendor due diligence, and exit strategies.

20 minutes

Incident Response Planning for Law Firms

Provides a framework for incident response in law firms, covering breach detection, forensic investigation, notification obligations, privilege protection, and bar reporting requirements.

20 minutes

Mobile Device Security and Remote Access

Covers mobile device security for legal practice, including BYOD policies, mobile device management, remote wipe capabilities, VPN requirements, and public Wi-Fi risks.

20 minutes

Building a Security Culture: Training, Policies, and Compliance

Examines the human and organizational dimensions of law firm cybersecurity, including phishing simulations, security policies, access controls, and building sustained compliance.

20 minutes

Learning Progression

This course is designed to be taken sequentially. Earlier units establish foundational concepts that later units build upon. While you can explore units in any order, following the numbered sequence provides the most coherent learning experience.