For an industry that encourages its clients to protectthemselves extensively against risks that could lead to damages totheir business, results show that not all attorneys practice whatthey preach, Marsh's 2014 Global Law Firm Cyber Survey reveals.

The concern surrounding cyber threats in the legal professionsupports research dating back to 2011 from cyber security firmMandiant, which stated that 80% of the largest 100 law firms hadbeen hacked. But despite this pressing concern, 72% of respondentsacknowledged that their firms have not assessed and scaled the costof a data breach based on the information. Furthermore, 51% havenot taken precautionary measures to insure their cyber risk, or areunaware whether their firms have taken such action. And nearlytwo-thirds of respondents have not calculated the effective revenuelost or extra expenses incurred in the aftermath of a cyberattack.

Firms have taken some security precautions, but still arevulnerable. Survey results show that 67% of Marsh respondentsoutsourced to meet their information technology needs, which allowsunauthorized personnel access to valuable and confidentialinformation.