Course · Interpersonal Skills
Law and Cybersecurity
Cybersecurity for lawyers: why practices are targeted, the duties that make security mandatory, the basic controls, social engineering and payment fraud, incident response, cyber law and electronic evidence, and how to run security and advise clients.
Pay once, keep it forever · secure payment by Stripe
A law practice holds other people’s secrets, other people’s money and early knowledge of deals and disputes, and criminals know it. This course is written for lawyers, not for technicians. It explains why practices are targeted and how attacks work; the professional, data protection, contractual and regulatory duties that make security a legal matter; the basic controls that stop most attacks; the human tricks behind phishing and payment fraud; what to do in the first hours of an incident, including ransomware; how cyber law and electronic evidence work; and how to run security in a practice and advise clients and boards. It comes with three working tools: a security self-check, a phishing red-flag checker and a breach clock.
The Curriculum
Why lawyers are targets: what attackers want, how they get it and the three things to protect→
What attackers want from a law practice, the main kinds of attack, the three goals of security and cyber risk as likelihood and impact. Practice: What Is at Stake? and Which Goal Failed?
The duties behind security: confidentiality, competence, data protection, contracts and regulation→
Confidentiality and competence, data protection, contracts, regulation and cybercrime law as the sources of security duties. Practice: Whose Duty Is It? and Spot the Duty.
The basic controls: accounts, updates, backups, encryption, devices and suppliers→
Passwords and multi-factor authentication, least privilege, updates, backups, encryption, devices, remote work and suppliers. Practice: Which Control Fits? and a Security Self-Check tool.
Social engineering and payment fraud: phishing, impersonation and the verification habit→
The psychology of phishing, red flags, payment-redirection fraud, voice and video impersonation, and the verification habit. Practice: Spot the Red Flag and a Phishing Checker tool.
When it goes wrong: ransomware and the first hours of an incident→
Incident response stages, the first hours, ransomware and the question of payment, preserving evidence, who to tell and how to speak to clients. Practice: Put the Response in Order and the Breach Clock.
Cyber law and electronic evidence: offences, remedies, forensics and cross-border cooperation→
Cyber offences, remedies for victims, electronic evidence and authenticity, digital forensics and cross-border cooperation. Practice: Offence or Not? and Is the Evidence Sound?
Running security in a practice and advising clients on cyber risk→
Governing security, policies and training, cyber insurance, due diligence and contract terms, advising boards and clients, and common mistakes. Practice: Who Owns It? and Advise the Client.
Capstone: Capstone: a one-page security review of a small law practice→
Review a small practice against the baseline, find the three biggest gaps and write a one-page recommendation. Includes the self-check, the breach clock and a practice room.
What It Covers
“You will not be asked to become a technician. You will learn the questions to ask, the habits that stop most attacks and the advice that a board can act on.”
- Seven modules and a capstone that follow a practice’s real exposure: the threat, the duties, the controls, the human attacks, the response, the law and the management.
- Built for lawyers: confidentiality, privilege, supervision, client contracts, insurance and advising boards, with no code and no unexplained jargon.
- Stable principles only: it teaches how to analyse a risk and where to check the current law and standards, not the latest headlines.
- Three interactive tools you keep using: a Security Self-Check that scores a practice and ranks its gaps, a Phishing Red-Flag Checker, and a 72-hour Breach Clock; plus practice labs and a capstone review.
Included With All-Access · Or Buy It Alone
Introductory PriceChoose how you unlock Law and Cybersecurity
Subscribe for every course and most tools, or buy just this one course on its own.
The one-time prices below are early, introductory rates for a brand-new catalog — expected to rise as we add more content. Buy now and it’s yours at today’s rate, forever.
Buying a course needs no account: you pay, and we email you a one-click sign-in. Subscriptions need a free account.
Look first, then buy. Free previews on every product page. Secure payment by Stripe. Pay once, keep it forever. Details
Or give this as a giftOther Scrolls in This Chamber
Across the Table$15 →Interests, walk-away numbers, offers, trades, pressure tactics and professional limits, with practice rooms and calculators.
Cooling the Room$15 →How conflict escalates, mapping a dispute, de-escalation, hard conversations, choosing a process, mediation, power, culture and ethics, with practice mediations.
The Client Conversation$15 →Trust, the first meeting, fees and scope, updates in plain words, advice and decisions, bad news, boundaries and ethics, with practice meetings.Part of a program
Step 12 of 12 in the Law and Data Practitioner Program
Learn to put honest numbers on legal work: risk, cases, contracts, money, negotiations, deals and regulation, and to show them so that people act. Each course is sold on its own; the whole program is $69 once and unlocks every course in it.
See the whole programModule 1 is free to try. Sign in, pass each module quiz and the course average, and your Certificate of Completion is emailed to you automatically. This course teaches method and technique with invented people and figures; it is general education, not legal advice, and professional rules differ from country to country.
Common questions
- Do I need technical knowledge?
- No. Technical ideas are explained in plain words. The course is about management, law and judgement, not about configuring systems.
- Is it only for large firms?
- No. It is written with small practices in mind, where one person often has to do everything. The baseline in Module 3 is deliberately achievable for a practice of any size.
- Does it set out the cybersecurity laws of my country?
- No. Laws differ and change. The course names the sources of duty and teaches you how to check the current rules for any client or practice, and it uses well-known statutes only as examples.
- Does it replace advice from a security professional?
- No. It prepares you to work with one: to ask the right questions, to understand what you are told and to advise clients. Specialist help is needed in a live incident.
- How does it relate to the GDPR and AI course?
- They fit together. GDPR and AI covers the data protection duties, including breach reporting; this course covers the security that prevents breaches and the response when one happens. The Breach Clock appears in both.
- How do I get the Certificate of Completion?
- Sign in, pass each module quiz and keep a course average of at least 75. The certificate is then issued and emailed to you automatically.
- Is any of it legal or security advice?
- No. It is general education using invented people and situations. Apply it to a real case only with advice on the facts and the law that applies.
Teaching? Share this with your class
Free to use in class. The free parts open for everyone, no account needed.