This checklist covers the SEC’s Wells Process, which is the informal pre-enforcement procedure through which the Division of Enforcement notifies a person or entity that it intends to recommend charges...
The following article is a summary of the full practice note, available to Practical Guidance subscribers by following this link . Not yet a Practical Guidance subscriber? Sign up for a free trial here...
This practice note covers the SEC’s use of administrative proceedings as an enforcement forum and explains how those proceedings differ from civil actions in federal district court. It begins by...
LexisNexis and the LexisNexis Rule of Law Foundation were recognized at the World Bank’s Law, Justice and Development Week 2025 in Washington, D.C., where leaders discussed innovative legal solutions...
The following article is a summary of the full article, available to Practical Guidance subscribers by following this link . Not yet a Practical Guidance subscriber? Sign up for a free trial here . The...
Copyright © 2026 LexisNexis and/or its Licensors.
* The views expressed in externally authored materials linked or published on this site do not necessarily reflect the views of LexisNexis Legal & Professional.
By: Stephen E. Reynolds and Nicole R. Woods ICE MILLER LLP
In response to the increased concern surrounding cybersecurity, the Association of Corporate Counsel (ACC) has released the Model Information Protection and Security Controls for Outside Counsel Possessing Company Confidential Information. The authors of this article discuss the guidelines, which can serve as a benchmark for law firm cybersecurity practices.
MORE AND MORE FREQUENTLY, HEADLINES ARE FILLED with news of crippling cyberattacks designed to cause the most chaos in the shortest amount of time. Recent examples include the WannaCry and Petya ransomware attacks that affected businesses worldwide, including many law firms. The WannaCry attack affected more than 230,000 computers in more than 150 countries within a single day, causing massive disruptions
According to the 2016 ABA TECHREPORT, 20%-25% of law firms have already experienced a data breach. In fact, one large law firm, which recently touted its cybersecurity expertise, was hit by the Petya attack and suffered several days of total system shutdown. It is no surprise, therefore, that two-thirds of chief legal officers and general counsels rank information privacy and protection of corporate data as "very" or "extremely" important.
In response to the increased concern surrounding cybersecurity, the ACC released the Model Information Protection and Security Controls for Outside Counsel Possessing Company Confidential Information.1 The ACC hopes these guidelines will serve as a benchmark for law firm cybersecurity practices.
To read the full practice note in Lexis Practice Advisor, follow this link.
Stephen E. Reynolds, a former computer programmer and IT analyst, is a partner in Ice Miller LLP’s Litigation Group and co-chair of the Data Security and Privacy Practice, focusing his practice on commercial litigation and data security and privacy law. Nicole R. Woods is an associate in the firm’s Data Security and Privacy Practice, focusing on complex commercial litigation, including contract disputes, business torts, and financial services litigation. The authors may be reached at stephen.reynolds@icemiller.com and nicole.woods@icemiller.com, respectively. This article was published in the October 2017 issue of Pratt’s Privacy & Cybersecurity Law Report. All rights reserved. Visit the website to subscribe.
For a sample plan setting forth an organization’s policies and procedures for maintaining and securing confidential materials, see
> WRITTEN INFORMATION SECURITY PLAN
RESEARCH PATH: Corporate Counsel > Policies and Procedures > Privacy, Security and HIPAA > Forms
For more information on cyber liability insurance, see
> CYBER-SECURITY INSURANCE
RESEARCH PATH: Corporate Counsel > Business Torts and Insurance > Insurance Policies > Practice Notes
For guidance on negotiating and drafting cloud computing agreements, see
> INITIAL CONSIDERATIONS IN CLOUD COMPUTING AGREEMENTS
RESEARCH PATH: Corporate Counsel > Software and Information Technology > Cloud Computing > Practice Notes
For guidance on creating a plan to assign priorities and responsibilities for cybersecurity within an organization, see
> CYBERSECURITY RESILIENCE IMPLEMENTATION PLAN
RESEARCH PATH: Corporate Counsel > Cybersecurity > Information Security > Checklists
1. ACC Model Information Protection and Security Controls for Outside Counsel Possessing Company Confidential Information.