Redirecting. Click Here to view the article
Sorry, I could not read the content fromt this page.Monday, July 8, 2013
Not Having a BYOD Policy Can Get Expensive
Cybersecurity is, it’s fair to say, a major obsession in corporate and government circles. The evidence isn’t merely anecdotal: A whitepaper released earlier this month and analyzed by CorpCounsel.com says that cybersecurity is one of the top risk factors cited in filings to the Securities and Exchange Commission.
You’re concerned, too, if the results of our 2013 In-House Tech Survey are anything to go by. Specifically, a good chunk of respondents are worried about leaks from employees bringing their own devices (BYOD) to work—and carrying company secrets out with them.
Here’s some more reinforcement: A survey by e-discovery vendor FTI Technology shows that 64 percent of the in-house lawyers responding called Big Data their biggest e-discovery challenge, and are preoccupied with the implications of BYOD.
“Many of us are dealing with the BYOD issue right now,” notes one respondent. “There’s a lot of competition between IT, which wants to serve the employees, and the legal/compliance teams, who want [security on devices] done properly.”
What’s a tech-savvy corporate counsel to do? You can’t go back, says Erik Hammerquist, director of FTI. “So you have to have an acceptable use policy.” He says legal departments, working with IT and human resources, need to issue written rules for employees accessing company data on personal devices. These policies should be read and signed by the employees.
Some companies are going further, making sure that IT professionals segregate company material on a separate part of the employee’s phone, tablet, or laptop.
What happens if you don’t have formal BYOD policies? “It can get expensive,” says Hammerquist. Often, e-discovery means getting access to the employee’s device. If the employee refuses, “it can get complicated—and expensive.” He talks about one situation he experienced in which an entertainment industry employee balked at letting his company lawyers see texts on his phone. “Another law firm was brought into the matter—another expense.”
Having a BYOD policy—and employees who adhere to guidelines—can mitigate such risk and expenses. In the end, Hammerquist says, “if you can control what happens when people misbehave, you’re doing okay.”
A browser or device that allows javascript is required to view this content.
You must be signed in to comment on an articleSign In or Subscribe">
Sunday, July 7, 2013
Big Banks Worried About Outside Counsel Who BYOD
Note to Big Law: When you’re working with Wall Street, don’t BYOD. At least not until the devices are configured to secure data.
That’s the anti-Bring Your Own Device message the country’s biggest banks and financial institutions are trying to convey to their law firms, according to the global chief operating officer of Goldman Sachs’s legal department.
Actually, Goldman’s Jeffrey Isaacs doesn’t care if the outside lawyers his department hires have personal smartphones in their pockets—he just doesn’t want them to use the same devices for business.
He spoke to a small gathering of in-house types who had been invited to attend a panel discussion called “Legal Departments Under Pressure,” which was held at the Yale Club in Manhattan on June 19. Isaacs underscored his point by picking up the two smartphones on the table in front of him.
“Everyone on Wall Street” uses separate devices for business and personal data, he said. But the law firms they hire as outside counsel haven’t gotten on board, he complained. The firms are apparently worried that they will be at a “competitive disadvantage”—especially when recruiting talent—if they agree to enforce stricter data-security standards for smartphones, tablets, laptops, and other digital devices.
Isaacs wasn’t the only panelist who expressed concern. The subject was first raised by moderator Kris Satkunas, director of strategic consulting at LexisNexis, which sponsored the event (organized by Sandpiper Partners LLC). Panelist Lani Quarmby, associate GC who oversees outside counsel management at Bank of America, said she and her colleagues spend lots of time talking to law firms to see how they’re protecting data.
“Can you imagine if a law firm had a breach” of their clients’ confidential information? “We wouldn’t work with them again,” she said.
Rose Battaglia, global chief operating officer responsible for Deutsche Bank’s legal and compliance departments, also chimed in. For the first time her team is being asked to perform risk assessments of their law firms. In a world where companies are responsible for the behavior of their vendors, law firms are among the last vendors they’re assessing, she said.
Isaacs said that companies understand that federal regulators are eager for them to resolve the issue. He has a sense that if companies don’t, the regulators will step in and impose a solution for them.
Many of the largest banks and financial institutions are concerned enough that they have joined together to attack the problem as one, Isaacs said. He and his counterparts have identified 11 big law firms and have begun a dialogue—mostly with the firms’ chief information officers, along with a smattering of partners, he said.
They plan to voice their concerns in a more public way at a conference in Las Vegas in August, Isaacs added, referring to the upcoming International Legal Technology Association event. And if that doesn’t work, he concluded, Goldman intends to host a data-security meeting in October.
If there was a time when BYOD sounded like an acronym you might see at the bottom of a party invitation, apparently those days are gone. The message from the big banks seems clear: Sober up!
A browser or device that allows javascript is required to view this content.
You must be signed in to comment on an articleSign In or Subscribe">
Subscribe to:
Posts (Atom)
