Powered by MOMENTUM MEDIA
A new survey reveals that more chief legal officers are putting their hands up to lead on matters pertaining to cyber security, and businesses are increasingly employing dedicated cyber lawyers.
The Association of Corporate Counsel (ACC) Foundation has released its 2025 State of Cybersecurity Report: An In-house Perspective, which surveyed 278 in-house legal professionals across 16 countries and 20 industries.
The report showed, among other things, that chief legal officers (CLOs) are fast becoming prominent figureheads in cyber security strategy and are managing such duties responsibly.
It found that two in five (38 per cent) CLOs now lead on cyber responsibilities, up from 15 per cent five years ago. Moreover, one in three (32 per cent) organisations have at least one dedicated cyber lawyer on staff, up from 18 per cent in 2020.
Half (50 per cent) of CLOs are part of a team with cyber security responsibilities, even when they do not hold a specific leadership position in that area, and almost all (93 per cent) of organisations have lawyers in their incident response teams (the CLO is a member 73 per cent of the time).
Elsewhere, 38 per cent of law departments are play an active role in third-party risk management, and reputation damage, liability and litigation, and business continuity threats are the top three concerns for CLOs navigating cyber security threats.
The findings, the ACC Foundation surmised, demonstrate a “pivotal shift” in recognition of the increasing legal and governance aspects of cyber security, making the CLO role essential for managing operational risks, incident response, liability, reputation management, and business continuity.
Speaking about the report, ACC president and chief executive Veta T. Richardson said: “Businesses today understand that cyber security is a significant, organisation-wide threat with large-scale reputational, operational, legal, and financial implications.”
“[The] report clearly shows the rapid expansion of CLOs and their teams being involved to lead and help navigate the complex terrain of cyber-related preparation, deterrence, and response.”
ACC Foundation executive director Jennifer Chen added that the report “serves as a call to action for in-house counsel to embrace their expanding role, develop their cyber security expertise, and proactively address the legal and regulatory challenges presented by this ever-evolving threat landscape”.
“By taking a leadership role in cyber security, in-house counsel can protect their organisations from significant financial, reputational, and legal harm, ensuring business continuity and building a more resilient future,” she said.
Jerome Doraisamy is the managing editor of Lawyers Weekly and HR Leader. He is also the author of The Wellness Doctrines book series, an admitted solicitor in New South Wales, and a board director of the Minds Count Foundation.
You can email Jerome at: