Cybersecurity and Encryption 101 for Lawyers

Transcription

1 Cybersecurity and Encryption 101 for Lawyers

2 Meet Terry Jarrell Personal Trainer for Mac, ipad and iphone Apple Consultants Network Advisory Council Rocket Matter Certified Expert Member of FL Bar Animal Law Section

3 Cybersecurity Threats

4 Ethical Obligations to Safeguard Confidential Information Factors to be considered in determining the reasonableness of the lawyer s efforts include, but are not limited to, the sensitivity of information, the likelihood of disclosure if additional safeguards are not employed, the cost of employing additional safeguards, the difficulty of implementing the safeguards, and the extent to which the safeguards adversely affect the lawyer s ability to represent clients (e.g. by making a device or important piece of software excessively difficult to use). Rule 4-1.6, Paragraph (e) Confidentiality of Information

5 Two things are happening more than ever right now: Lawyers are using the cloud to store sensitive information; and lawyers are under attack from cyber criminals looking to steal sensitive information. Al Saikali Florida Bar Technology Committee Chair

6 Quick Security Audit What are you doing to protect not only yourself but your clients and their data? Do you use VPN services? Is the Wi-Fi in your office secure? What type of account do you have? Do you routinely audit your passwords and keep your software updated? How do you keep informed with technology and training? Do you have professional guidance?

7 Agenda Security Basics: Updates, Passwords, Networks Encryption and secure services Securing your files stored and shared on your devices and in cloud services

8 Three Basic Security Procedures

9 Update Hardware and Software Regularly Hardware v. Software OS upgrades and App updates are different Updates are a good way to patch security vulnerabilities Upgrade hardware when a device can t run the latest OS

10 Password Policies 1. Organize your passwords 2. Use a secure tool to store information 3. Determine permission levels for other users 4. Conditions that necessitate change

11 Securing Your Network WEP/WPA/WPA2 Password protect your network (and change all default passwords!) Set up a guest network for visitors

12 Virtual Private Network (VPN) Creates an encrypted tunnel around your connection and activity to protect from intrusion Key Features: Zero logging No third-party networks No bandwidth limits, fast connection Multiple servers and countries

13 Encryption

14 Poor practices are a liability!

15 Encryption Quick Start File Encryption v. Encryption Make sure the method you decide on is consistent NEVER SEND PASSWORDS VIA AppRiver, Hushmail, ProtonMail

16 Securing and Encrypting Your Devices

17 Laptops, Hard Drives, USB Devices Best Practices: Change administrative passwords regularly Set computers to automatically log out after a couple of minutes Maintain consistent and verified backups Change sensitive passwords with employee turnover Built-In Encryption Tools Windows 7 and higher: BitLocker, EFS Mac: FileVault

18 Phones and Tablets Best Practices: Fingerprint v. passcode Use complex passcode icloud, Find My iphone/ipad Android Device Manager Encryption Tools: Apple: Passcodes, set to erase after multiple attempts Android: Passcode, encrypt device from system settings

19 Third Party Encryption Tools Symantec: PGP and Endpoint McAfee: Endpoint Encryption Check Point: ZoneAlarm DataLock TrueCrypt BoxCryptor SSE Universal Encryption

20 Cloud Computing Secure your files BEFORE you upload them to the cloud Services like Box, ShareFile have built in encryption tools, can layer on BoxCryptor for others Always verify security procedures with cloud services providers

21 Additional Resources

22 Q & A

23 Florida Bar Members get 15% off Rocket Matter, for life!

24 Course # 2729 Thank You! Nefra MacDonald nefra@rocketmatter.com Terry Jarrell terry@terryjarrell.com