Law firm IT support is outside help that keeps a firm's computers, email, practice management and document systems running, and protects client confidences the way the ethics rules require. For a small law firm, it should cover monitoring, help desk, backups, security, secure client communication and the documentation that shows the firm took reasonable steps. Here is what that looks like for a 5 to 50 person firm, what it costs, and how to choose a provider.
Law firm IT support covers every system the firm uses to hold or move client information. In a small firm that usually means:
Rick Smaczniak, President of 360 Business Solutions, describes the security half this way: "Compliance and security is having full systems in place, that say you do get hacked, we're going to be able to just pull up an old version of what you're doing and you'll be back up and running in a little bit."
Law firm IT carries a duty most businesses don't have: the lawyer's obligation to protect client information. ABA Model Rule 1.6(c) says it directly: "A lawyer shall make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client." The full rule is on the ABA's site.
"Reasonable efforts" is where IT comes in. Multi-factor authentication, encrypted laptops, tested backups and written procedures are the evidence that a firm took reasonable steps. Without them, a firm has good intentions and nothing to show.
New York adds two specifics. Since July 1, 2023, attorneys must complete one CLE credit hour in Cybersecurity, Privacy and Data Protection as part of their biennial requirement. And New York's SHIELD Act, at General Business Law 899-bb, requires businesses holding New York residents' private information to keep reasonable safeguards. For a small business, the law says those must be administrative, technical and physical safeguards appropriate for its size, its activities and the sensitivity of the information it holds.
None of that is legal advice, and your ethics counsel is the right person for questions about your obligations. The point for IT is simpler: the rules ask for reasonable protection, documentation is how a firm shows it, and both are work an IT provider either does or doesn't do.
Email is the weak point at most small firms. It's where client documents arrive, where settlement figures and closing details are discussed, and where an attacker who gets one password can sit quietly and read everything.
The pattern to plan for is a fake message that looks like it came from a client, an opposing firm or a title company, asking to change where money gets sent. A firm that confirms any change in payment instructions by phone, using a number already on file, takes away the attacker's easiest win without buying anything. A firm with multi-factor authentication on every mailbox makes the password alone useless to the attacker.
The second weak point is the departing employee whose access never gets switched off. That's an IT process, and it should be a checklist item, not a memory exercise.
Lawyers are using AI tools for drafting and research, and the ABA has weighed in. In Formal Opinion 512, issued July 29, 2024, it said lawyers using generative AI must consider their existing duties, including competence and protecting client information.
For IT, that turns into practical questions: which AI tools are approved, which accounts staff use with them, and whether client information is going into a tool that keeps or trains on it. A firm that hasn't answered those questions has staff answering them one at a time. If you want help setting those rules, that's part of our AI consulting for small businesses.
At 360, most firms pay between $100 and $200 per user per month, plus a few flat monthly costs set by what the firm needs. For an 8-person firm, the per-user part works out to about $800 to $1,600 a month. Those figures are our own range applied to a common firm size, not a quote. The full breakdown of managed IT costs shows what changes the price.
Where a firm lands depends mostly on its security and documentation needs, how many people work remotely, and whether there's an on-site server. You get the exact number after we look at your setup.
JD Sentz, COO and CTO of 360, gives the short version: "Look for a local team that can provide on-site support, works with recognized security frameworks, and is clear about what it can and cannot certify."
Questions to ask any provider before you sign:
Our own answer to that last one: an average under 15 minutes, and it's an average, not a contract guarantee. Our managed IT services for law firms lay out what's included, and our compliance and security work covers the documentation side.
360 Business Solutions provides law firm IT support for small and mid-sized firms in Buffalo and Western New York from its office at 405 North French Road in Amherst, with on-site and remote support. Services include managed IT, co-managed IT alongside an in-house person, cybersecurity, backups and compliance documentation, typically at $100 to $200 per user per month. Call (716) 650-7200 or book a 30-minute assessment.
In our view, most firms past a handful of people do, because the ethics rules expect reasonable protection of client information, and a part-time or break-fix arrangement rarely produces that documentation.
At 360, most firms pay $100 to $200 per user per month plus a few flat costs. An 8-person firm lands around $800 to $1,600 a month for the per-user part.
ABA Model Rule 1.6(c) requires a lawyer to make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client.
Yes. Since July 1, 2023, New York attorneys must complete one CLE credit hour in Cybersecurity, Privacy and Data Protection as part of their biennial CLE requirement.
ABA Formal Opinion 512 says lawyers using generative AI must weigh their existing duties, including competence and confidentiality. In practice that means approved tools, firm accounts and clear rules on what client information goes in.
Yes. Co-managed IT keeps your person in place and adds a team for monitoring, security and documentation.
Free 30-Minute Technology Assessment
.svg)
Your complete technology partner. Built for businesses that can't afford to slow down.
Proudly serving Amherst, NY and Western New York.
.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}