Cyberattacks are inevitable. Setting up effective preventive measures need not be either prohibitively expensive or time consuming, even for lawyers practicing on their own or in small firms, if you know the basics concerning ethical responsibilities and the most common types of attacks.

Several Rules of Professional Responsibility are implicated by a lawyer’s use of technology. The authors summarize the rules and discuss lawyers’ requirement to provide “reasonable” efforts to protect client information from unauthorized or inadvertent disclosure.

Here’s a checklist of reasonable ways lawyers can increase their cybersecurity and reduce their vulnerability to both external and internal threats.