When computers talk to each other over the Internet, there’s a vast realm of entities between the two systems. Bad Actors do everything they can to extract and capture any information they can which then gets sold on the dark web. Some might think “there’s nothing you can do” but there are things that can be done to minimize risk. Some will be covered in this series. If you want more detail on any other subject, leave us feedback.
The Washington State Bar Association has a web site with a guide to cybersecurity here but it can be daunting. Our goal is to break it all down into the basics of what can be done on a day to day basis handling digital data for clients as well as protecting your firm, and yourself.
Some of the main topics we’ll cover are:
– Password Hygiene
– Secure document handling
– Phishing and e-mail awareness
– Endpoint Protection (your desktop or laptop)
– Mobile Device Security
– Vendor and Cloud Risk management
– Backup and recovery (commonly called Disaster Recovery)
– Access Control
– Incident response
– AI Governance & privilege protection