Cyber Threats: Should You Run a Tabletop?

Overview of Cyber Threats: Should You Run a Tabletop?

Law firms hold sensitive client data, privileged communications, and confidential deal information that make them high-value targets for cyber threat actors, including ransomware groups. This course introduces tabletop exercises as a structured, discussion-based method for testing how a firm would respond to a realistic cyber incident before one actually occurs. Participants will learn what a tabletop exercise involves, how to design one that reflects the threats most relevant to legal environments, and how to translate the results into concrete improvements in policies, roles, and response procedures. The course is designed to help law firm leadership and their advisors make informed decisions about whether and how to invest in this form of preparedness.

What you’ll learn in Cyber Threats: Should You Run a Tabletop?

• Explain what a tabletop exercise is and how it differs from other forms of incident response testing
• Identify the cyber threats most commonly directed at law firms and why they present distinct risks
• Evaluate whether a tabletop exercise is an appropriate and timely investment for your firm's current security posture
• Design a tabletop scenario that reflects realistic threat vectors relevant to legal practice environments
• Facilitate or participate in a tabletop exercise that generates actionable findings rather than checkbox outcomes
• Apply lessons from a completed exercise to improve incident response plans, team roles, and client notification procedures

Curriculum

1. 1. Introduction

   Video coming soon

Your instructor

Scott Corzine

Board-Level Strategic Advisor, Corzine Global Advisors, LLC

Corzine Global Advisors, LLC

Scott Corzine is a board-level strategic advisor and board member who works through Corzine Global Advisors, LLC, having previously served as a managing director in CohnReznick's Cybersecurity, Technology Risk and Privacy practice. He advises boards and senior management on cyber resilience, operational risk, governance, compliance strategy and cybersecurity readiness for M&A, working with private sector entities in multiple sectors, universities, not-for-profits, and state and federal government organisations in the U.S. and abroad. He established and managed the cybersecurity and operational risk management practices at Risk Solutions International, LLC, FTI Consulting, Ankura Consulting and CohnReznick Advisory, LLC, and has helped manage a series of early-stage technology and business services ventures to successful exits as a senior executive, CEO and board member. At Legal Cyber Academy he teaches on the current state of cyber threats and tabletop exercises.