GT-100-LP
Shock & Awe: Cybersecurity Awareness for Legal Professionals – Level 1
Description
Become a human firewall! In this interactive and fun cybersecurity awareness training course designed for legal professionals, you’ll experience live demos and workshops revealing how attackers exploit vulnerabilities and showcasing a Hacker’s Toolkit: including evil devices that spy on you, phishing scams, ransomware, Wi-Fi poisoning, Evil Twins, and poison phone hacking. Investigate how hackers exploit social engineering and social media to infiltrate protected systems. Learn regulatory best practices while collaborating to outsmart cyber threats.
Objectives
By the end of this course, participants will be able to:
- Promote a culture of security within legal teams and organizations.
- Observe the Hacker Toolkit (NDA/ethics contract must be signed, no photos).
- Understand the security risks unique to law firms and services.
- Recognize threats to client data and internal systems.
- Learn how to identify and mitigate social engineering and cyberattack tactics.
- Apply best practices in information security, regulatory compliance, and incident response.
Key Takeaways
- How to build a human firewall and key traits
- Deepened awareness of the evolving threat landscape in the legal industry
- Practical knowledge to secure sensitive systems and client data
- Confidence in identifying, avoiding, and reporting cyber and physical security threats
- Reinforced commitment to regulatory compliance and organizational trust
Certificate of Completion
- Certificate of Completion issued after successful completion of all chapters, hands-on exercises, and course evaluation.
- Certificate is downloadable from the Ghost Team Academy Education Portal.
Training Outline
Module 1: Welcome
- Topics:
- Introductions and Expectations
- Pre exam, 30 minutes on your laptop or phone
- Course Overview
Module 2: Introduction to Security in the Legal Industry
- Topics:
- The Legal Industry as a High-Value Target
- Overview of Security Threats: Fraud, Phishing, Insider Threats, and Cybercrime
- Regulatory Landscape
- Hacker Toolkit (NDA/ethics contract must be signed, no photos)
- Instructor Demo: Surprise Shock& Awe
Module 3: Information & Data Security
- Topics:
- Protecting Client and Transaction Data
- Secure Data Handling and Transmission
- Data Classification and Access Control
- Encryption Basics and Usage
- Instructor Demo: Surprise Shock& Awe
- Student: Hands-On Surprise Shock & Awe
Module 4: Cybersecurity Threats & Defense
- Topics:
- Common Attack Vectors: Phishing, Ransomware, Business Email Compromise (BEC)
- The Dark Web
- Safe Use of Email, Browsers, and Online Tools
- Password Management and Multi-Factor Authentication (MFA)
- Identifying and Reporting Suspicious Digital Activity
- Instructor Demo: Surprise Shock& Awe
Module 5: Social Engineering & Insider Threats
- Topics:
- Recognizing Manipulation Tactics Used in Social Engineering
- Social Media: You’re Bleeding Information
- Real-Life Case Studies from the Legal Industry
- Insider Threat Detection and Prevention
- Secure Communication with Clients and Vendors
Module 6: Physical & Remote Security Practices
- Topics:
- Securing Devices and Documents in the Office and at Home
- Clean Desk Policies and Physical Access Controls
- Security Considerations for Remote and Hybrid Workforces
- Safe Use of Mobile Devices and Public Networks
- Setting Up a Personal VPN
- Instructor Demo: Surprise Shock& Awe
- Student: Hands-On
Module 7: Incident Response & Compliance
- Topics:
- What To Do in Case of a Breach or Suspected Attack
- Internal Reporting Channels and Protocols
- Regulatory Breach Notification Requirements
Module 8: Conclusion
- Topics:
- Course Summary
- Key Takeaways
- Q&A
- Post-course exam
- Course evaluation online form
