CIO Shawn Mitowski just penned an article on FindLaw detailing how he chose Biscom’s secure file transfer solution to solve the security concerns of e-mail, and other unsecure methods to exchange documents. Big selling points were ease of use and security, as well as large file support. Thanks for the nice article Shawn!

• Encryption options
• Re-Evaluating Our Enterprise Security Standard
• Making Safe Harbor Meaningfu

Register for the webinar now.

That’s what a typical data breach will cost you these days, according to a data breach study released this month. This figure is up seven percent from 2009, with the most common causes of data breach attributed to breach incidents (41%), lost or stolen portable or mobile devices (35%), malicious attacks (31%) and system failure (27%.)

While $7.2 million is a sizeable sum we all can collectively cringe at, it doesn’t even come close to estimating the damage to your law firm’s reputation or client relations should it encounter a data breach. Get a taste of how it could feel by reading up on ACS:Law and how it failed to properly secure personal information.

Encryption Kryptonite

The study states that encryption is driving “a decrease in breaches due to system failure, lost or stolen devices and third-party mistakes.”  I’m a big fan of encryption (and I suspect anyone in the legal world would be as well), but like Super Man, encryption faces its own version of kryptonite: File transfers via FTP or email.  Both FTP and email post significant risks that can open the door for regulation violations or confidentiality breaches.

File Transfer Protocol (FTP) is limited to single authentication – not two-factor authentication which is a requirement of PCI and other security standards. Also, in today’s rushed law firm IT department, there is the risk of an FTP site being set up improperly or of rogue lawyers setting up their own sites.

Email is insecure because it doesn’t allow users to encrypt large files and documents as they are transmitted to the recipient. Plus, most companies and email providers have limitations on the size of email attachments to keep the strain off the servers. This results in bounce backs, error messages and information potentially getting in the hands of someone who shouldn’t see it.

The Remedy: Managed File Transfer

You can defeat encryption kryptonite from emails and FTP sites with managed file transfer (MFT). MFT is a secure method of transferring large files and sensitive data and is typically used in place of e-mail and FTP.

With MFT, you can send encrypted files through a designated network that automatically logs and centralizes the audit trail. This applies most commonly in situations where your company is regulated by the Payment Card Information Data Security Standard (PCI DSS), HIPAA, SOX and other regulations.

Here’s how one law firm uses managed file transfer and reduced IT help desk hours in the process.

Even with the best efforts, every law firm faces the potential of data breaches and the fallout that comes with it. By identifying weak links in your security – such as the encryption kryptonite of FTP and  emails – and applying technology such as MFT to combat it, you elevate your ability to thwart potential data breaches. And all in a single bound.

Robert Matthews, from Biscom will be providing examples  of how healthcare leaders are using secure file transfer to protect personal health information  with minimal impact on user behavior and maximum compliance with HIPAA and HITECH guidelines.

On the forefront: Breaching client confidentiality and regulations.

Beyond the obvious dread of jeopardizing a law firm’s reputation and opening it up for massive fines, there’s a personal take as well. IT leaders are realizing that they are responsible for technology safeguards that protect client data and comply with federal and state data privacy regulations.

The Culprits: Email and FTP Sites

Two methods of potentially risky file transfer kept surfacing during our conversations: Email and FTP sites.

The attendees expressed concern that there seems to be little regard from attorneys and staff when  it comes to potential security breaches caused by using email and unsecured FTP sites  to transfer client documents and files.

It is almost like the proverbial Sword of Damocles is hanging over legal IT’s head. IT is only one wrong click or FTP error away from heavy fines and potential damage to law firms’ reputations.

Revenge of the Large Email Attachments

The 2010 ILTA member technology purchasing survey identified email management as the biggest issue facing legal IT for the third year running and the roadshow attendees verified that the ever-increasing size of email attachments is a growing support issue.

Is this scenario familiar?

An attorney tries to attach a 50 MB+ PDF to an email addressed to a client.  If the email is lucky enough to traverse the firm’s exchange gateway, there is a good chance it will get bounced back due to recipient email size limitations.  The attorney then receives an undeliverable message (sometimes not until the next day) and contacts IT for help.  Cue the IT support drama!

Would you believe that one of the most popular remedies is to break up a large file into multiple smaller files and then send multiple email messages?  This is a quick fix, yes, but doesn’t speak to a law firm’s technical prowess.

And Don’t Even Start us on FTPs

Another common option is for IT to erect an FTP site. After a communal groan, the attendees agreed FTP sites are often difficult to use, challenging to secure and an overall pain in the neck.

What do you think?

Does your law firm face challenges when transferring large files?  What do you think are the leading security issues around this?

Leave a comment below so we can continue the conversation.

Coming to a City Near You

ILTA is planning more roadshows for Biscom so hopefully I’ll be in your neck of the woods soon.  Feel free to reach out to me at cmagliato at biscom.com if you have a specific city in mind you’d like to see us in. I will keep you posted.

We’re pleased to announce integration with Microsoft’s SharePoint 2010 server. With this new connector, SharePoint users can send documents and files from their document repositories to external recipients easily and securely.

A few nice things about integrating with SharePoint:

• Completely secure collaboration
• No need to set up a separate external SharePoint site for external users
• Collaboration can happen without any tedious user setup in Active Directory
• All deliveries are tracked and logged
• Leverage your existing BDS application

For more information, see the new SharePoint page on our Web site.