What would you actually do in the first 72 hours?
A live, CPD-accredited cyber breach simulation built exclusively for law firm leaders, no jargon, no slides, just decisions.
Founder & Principal Consultant – Cyooda Security
- OVERVIEW
What this webinar is about
A practical, scenario-based session built exclusively for law firm leaders navigating cyber risk.
Cyber incidents rarely unfold neatly. Systems slow down. Alerts start appearing. Staff cannot access files. Partners begin asking questions. Then suddenly the ransomware note appears.
In this interactive webinar you will step through a realistic cyber breach scenario affecting a law firm, exploring the decisions leadership teams must make as the situation escalates. Participants will see how events can quickly move from a suspected IT issue to a full cyber crisis involving legal, operational and reputational risks.
The session focuses on what happens during the first 72 hours of a cyber breach — the period that often determines how serious the incident ultimately becomes.
- Learning Outcomes
What you will learn
During the session we will explore:
- How cyber incidents typically unfold inside professional services firms
- The critical decisions organisations face in the first hours of a breach
- The role of legal, communications and IT teams during a crisis
- Why evidence collection and forensic investigation matter early
- Common mistakes organisations make during cyber incidents
- Practical lessons from real investigations
Participants will leave with a clearer understanding of how organisations should respond when a cyber event becomes a business crisis.
- The Simulation
The Scenario
The session is built around a simulated cyber incident involving a mid-sized law firm. Participants will see how events escalate from early warning signs to a ransomware attack affecting firm systems and potentially sensitive client information.
Issues explored include:
- Ransomware impacting legal systems
- Internal communications challenges
- Potential client data exposure
- Media enquiries and reputational risks
- Decisions around containment, investigation and recovery
This format allows participants to experience the real decision-making pressure leaders face during a cyber crisis.
- The Method
The Cyooda Colour Code Method™
Built on 25 years of real-world learnings from cybercrime investigations, the Colour Code Method™ is a proprietary incident response framework assessed across three core pillars.
These pillars are assessed across seven domains — from crisis management and communications through to network containment, evidence collection and disaster recovery — using a red, amber, green maturity model that shows at a glance where a firm is prepared and where it is exposed.
About Cyooda Security
Cyooda Security is an independent cybersecurity and digital forensics firm dedicated to protecting Australian law firms.
Founded by John Reeman, former CISO of King & Wood Mallesons, with 30+ years of experience protecting law firms from data breaches, ransomware, and cyber espionage.
🛡️ NSW Licensed ⚖️ Former KWM CISO 📅 30+ Years Experience
John Reeman
Founder & Principal Consultant