Law firms of all sizes, not just larger ones, are at risk of being hacked. Breaches of data security can have devastating financial, legal and reputational consequences for law firms and their clients. All law firms must, therefore, have a cybersecurity strategy. While much work has been done by some bar associations, no global guidance has been provided on cybersecurity. The Presidential Task Force on Cybersecurity has produced guidelines focusing on technology, organisation and staff training. While the guidelines will have relevance for all law firms, they are particularly appropriate for smaller firms because most larger firms will have a cybersecurity strategy in place. This session will focus on the risks of a data breach and what law firms can do to minimise those risks.