Hearsay Podcast – Staying Cyber Safe: Practical Cyber Security Tips for Law Firms – Santana Stallberg

• CPD Points: 1 [PM] [PS]
• Price: $79.00
• Area: Cybersecurity Law; Digital and Information Technology Law; Risk Management and Liability; Workplace, Business and Career
• Delivered: December 2025

Digital Content

• Podcast
• Materials Booklet

To purchase login below

Description

In this February 2026 podcast, Santana Stallberg speaks about staying cyber safe. Law firms (both large and small) are increasingly reliant on technology to manage sensitive client information, which makes them prime targets for cybercriminals as other traditionally attractive targets like banks harden their security posture. Effective strategies to secure data, streamline processes and maintain compliance are no longer optional; they’re essential to building trust and protecting a firm’s reputation.

Podcast Takeaways

• Firms need to take responsibility for assessing the cybersecurity risks associated with their vendors, as cyber liability insurance may not fully protect them if data breaches occur on either the vendor or firm's side.
• As such, it is important for firms to verify what happens to their data when they stop using a vendor, ensuring that the vendor has a deletion policy in place and properly manages the data.
• To avoid falling victim to phishing attacks, it is crucial for individuals to be vigilant and take extra steps to verify the authenticity of emails or requests, especially when they appear urgent or come from high-ranking individuals.
• Having an ISO certification is a good starting point for data security, but it does not guarantee protection from breaches.
• It is important to continually question the ways data security is being handled, as even companies like Microsoft, with ISO certification, have experienced breaches.
• When choosing cyber insurance, consider if it includes third party coverage for incidents involving vendors or clients. Look for coverage for your firm in case of a data breach and ensure it offers incident response coverage.
• Including these three elements in your policy can provide protection for your firm against costly data forensic services and additional security against third party attacks.
• Cybersecurity awareness training is typically done annually, but there is a growing need for threat intelligence, which involves staying updated on new threats through vendor updates, attending conferences, and utilising free online resources.
• Consider enhancing training by providing monthly updates on emerging threats to keep cybersecurity at the forefront of your firm's focus.

The following supporting materials are provided with this podcast:

– Infographic

– Session Summary

– Presenter Bios

– Test Your Understanding of the Session