Cyber Incident Response Plan
Key Takeaway
A documented set of procedures that a law firm will follow when a data breach or cyber attack is detected, including roles, communication protocols, forensic procedures, notification steps, and recovery actions. Many cyber carriers require an incident response plan as an underwriting condition and provide templates or consulting to help firms develop one..
Definition
A documented set of procedures that a law firm will follow when a data breach or cyber attack is detected, including roles, communication protocols, forensic procedures, notification steps, and recovery actions. Many cyber carriers require an incident response plan as an underwriting condition and provide templates or consulting to help firms develop one.
Why This Matters for Law Firms
This term defines the boundaries of what your insurance will and will not pay for. Law firms that misunderstand coverage terms risk discovering gaps in protection only after a claim has been filed, when it is too late to remedy the situation. Reviewing these terms with your broker before binding coverage is a critical risk management step.
Example Usage in Context
During a coverage review meeting, the firm administrator might note: "Our policy includes a cyber incident response plan provision -- let's make sure we understand exactly what that means for our specific practice areas before we sign off on the renewal."
Related Q&A
Related terms
Need help understanding your policy?
Get a free coverage review and we'll walk through every key term in your law firm's insurance program.