How Law Firms Can Achieve Cloud Compliance

This report examines escalating cyber risk to law firms as they migrate to cloud services, highlighting a 2023 breach at Orrick that resulted in exfiltration of PII and health data for over 637,000 individuals, industry survey findings on breach prevalence, seven major cloud compliance and security challenges (including hybrid-cloud complexity, evolving regulations, skill gaps, employee turnover, and expanded SaaS attack surface), and recommended mitigations such as understanding the shared responsibility model, adopting CDR/CSPM and MDR services, implementing IAM and resilience practices, and leveraging cloud-native security tools.