The Legal Cybersecurity Crisis: Potential Resolutions and Artificial Intelligence Implications

As cybersecurity becomes more relevant in the digital age, law firms have overlooked protections from cyberattacks, and this neglect has led to irreversible client data breaches. This thesis sought to investigate cybersecurity vulnerabilities in law firms and to theorize potential solutions using a literature review methodology. The research questions for this project are: What are the most effective cybersecurity protections for United States law firms, and should those cybersecurity protections utilize AI-based systems? In response, this thesis posits three claims. First, the central factors that contribute to inadequate law firm cybersecurity are as follows: lack of governmental oversight over legal cybersecurity methods, over-reliance on cybersecurity insurance, lack of cybersecurity culture, and the lack of preventive cybersecurity. Second, research indicated that the American Bar Association’s cybersecurity guidelines are the premier source of cybersecurity recommendations for law firms. Third, while artificial intelligence is a useful cybersecurity tool, law firms should implement artificial intelligence-based cybersecurity as part of a larger cybersecurity framework, not on its own.