A security alert comes in, staff report problems accessing files, and firm leadership wants answers. What do you do first—and who needs to be involved?

This interactive session takes participants through the first hour of a realistic law firm cyber incident. As new information emerges, attendees will discuss their response, compare approaches with peers, and consider how their decisions affect containment, evidence preservation, business operations, and communication.

The session will explore both the technical response and the coordination required between IT, firm leadership, service providers, and external advisors. Participants will leave with practical questions to help assess their own firm’s incident readiness.

Gurmukh is the former Director of IT at Farris LLP and founder of Ghag Consulting. He works with leadership teams to strengthen technology governance, cybersecurity readiness, and alignment between technology and business priorities. He brings firsthand experience leading technology and cybersecurity initiatives in a law firm environment and previously served as a BCLMA IT subsection co-chair.