One often-overlooked vulnerability is the security of computer networks operated by third-party vendors employed by the firm. By asking tough questions of vendors that handle client information and by scrutinizing the cybersecurity language in all contracts, diligent law firms can go a long way toward giving clients the data security protection they are legally and ethically entitled to have.