People, Process And Technology In A Legal Vendor Cyber Risk Management Program

People

Successfully executing a thorough cyber risk process requires people with cyber risk expertise. If you do not have these SMEs as part of your full-time legal operations staff, you can secure their services in one of three ways:

• Hire Resources:  Many organizations use the concept of a business information security officer to play the role of cyber security SME for a business unit. Some corporate legal departments are large enough to have this role on staff, but you should consider whether you have the volume of work to keep someone in this role busy full-time. If you can justify the volume, then you should consider the cost. Senior cyber security experts in major metropolitan markets are commanding high salaries and have many opportunities available to them. Few of these experts have direct experience in the legal market. You will likely need to offer significant salary and incentives to secure such a full-time hire, and doing so quickly may not be