What is Duty to Protect?
Beyond ethical obligations law firms are required to provide certain levels of security to protect clients data. States and governments have enacted legislation rquiring any provate or governmnenatal entity to notify indviduals of breaches or concerns regarding their private information.
Why Are Firms So Concerned?
Many firms are now asking, “What do we do to keep our systems and data safe? How can we keep this from happening to us?” There is a simple answer to this question: Hire a chief information security officer, give him or her a budget to hire the staff needed to build and maintain an enterprise security program (ESP), and exercise appropriate governance over the firm’s digital assets. (continue reading...)