NEW YORK, NY, Nov. 10, 2026 (GLOBE NEWSWIRE) — Krantz Secure Technologies, a managed IT and cybersecurity firm serving operationally mature organizations in New York since 1980, today released an analysis of IT and cybersecurity for New York City law firms, and why protecting privileged information has become a technology discipline as much as a professional one.
For a law firm, confidentiality is not a feature of the work. It is the work. The duty to protect client information follows every email, document, and device, whether an attorney is in the office, in a courtroom, at home, or traveling. According to Krantz, that is what sets a law firm’s technology apart from an ordinary business system: a lapse is not merely an inconvenience but a potential breach of client trust and professional responsibility.
Confidentiality Follows the Work Wherever It Goes
A generation ago, protecting client information was largely a matter of locking the file room. Today the same obligation travels across email, document and practice-management systems, cloud applications, and the laptops and phones attorneys carry everywhere. The duty did not change, but the surface that has to be protected expanded enormously, and it now includes places a firm may not think of as part of its technology at all, such as a personal device used to check email on a weekend or a home network an associate works from during trial.
This is why protecting privileged information takes more than antivirus software and a firewall. It requires a coordinated approach across every place client data lives: controlling who can reach what, securing email against the attacks aimed at it, keeping devices current and encrypted, and making remote access both convenient and safe. The firms that handle this well treat it as one connected system rather than a collection of separate products bought at different times for different reasons.
For a law firm, confidentiality is not a feature of the work. It is the work, and every system that touches client information has to be built to protect it.
A Breach Is a Professional-Responsibility Problem, Not Just an IT Problem
When a company in most industries suffers a security incident, the damage is operational and financial. When a law firm does, the damage reaches the core of the relationship between the firm and its clients. Privileged material may be exposed. Matters may be disrupted at a critical moment. And the firm may face questions about whether it met its professional obligations to safeguard what clients entrusted to it. The American Bar Association has made clear through its model rules and ethics guidance that competent representation now includes understanding and managing the risks of the technology a firm uses.
A breach at a law firm is not only an IT incident. It is a client-trust and professional-responsibility problem.
That framing matters because it changes who in the firm should care about security. It is not solely a question for whoever manages the computers. It is a question for the partners who carry the professional obligations, because the standard they are held to now assumes a reasonable understanding of how client information is protected. A firm that treats security as purely technical has misread where the real exposure sits.
The Standard of Care Is Rising, and It Has to Be Demonstrated
Clients, insurers, and courts are no longer satisfied with the assertion that a firm takes security seriously. Corporate clients send detailed security questionnaires and outside-counsel guidelines before sending sensitive matters. Cyber insurers require specific controls, such as multi-factor authentication and tested backups, before they will issue or renew a policy. Regulators and data-protection expectations, including guidance from the Federal Trade Commission on safeguarding personal information, continue to raise the floor. The common thread is that a firm must now be able to show what it does, not merely state that it does something.
The question clients, insurers, and courts now ask is not whether a firm takes security seriously, but whether it can show what it does.
Meeting that expectation is less about any single product and more about having reasonable, documented practices in place and being able to produce evidence of them when asked. For many firms the gap is not the controls themselves but the documentation, the proof that the controls exist and are maintained. Closing that gap is ordinary work, and it makes client security reviews and insurance renewals far less painful than they are for a firm scrambling to assemble answers after the request arrives.
The Legal Technology Stack Has Its Own Demands
Law firms do not run on generic office software alone. Document management, practice management, time and billing, court e-filing, and the retention obligations that sit on top of all of it create a technology environment with demands most businesses never face. Access often has to be organized by matter, so that the right people can reach a file and others cannot. Information has to be retained, and sometimes disposed of, according to rules the firm does not get to set. And the applications themselves are frequently specialized products from smaller vendors, which means supporting them well requires knowing how they behave rather than treating them as interchangeable.
That specialization is exactly why coordination matters so much in a legal environment. A firm that lets each application vendor manage its own corner, with no one responsible for how the pieces fit together, tends to discover the gaps at the worst possible time. The alternative is a single party who understands the whole stack, keeps it current and secure, and can speak to the vendors on the firm’s behalf when something has to be resolved quickly.
One Accountable Partner, Fully Managed or Co-Managed
Law firms run on a stack of specialized applications, document management, practice management, time and billing, and the communication tools that tie them together, and the most expensive failures happen in the gaps between vendors where no one owns the problem. Krantz positions itself as a single accountable partner for IT management, cybersecurity, Microsoft 365, cloud, and business continuity, whether it serves as a firm’s complete IT department or works alongside an internal team. That single point of ownership turns a problem during a filing or a trial from a scramble across support lines into one call to a team that already understands the environment.
The engagement is shaped to fit the firm. A smaller practice may want Krantz to run everything; a larger firm with internal IT may want security depth, Microsoft 365 expertise, and strategic planning added alongside the people it already has. The co-managed model lets a firm keep its internal knowledge while closing the gaps that a lean internal team cannot reasonably cover alone. In either model, coordination across the whole environment is what catches most preventable problems before they reach an attorney.
Resilience Keeps the Practice Running
An outage or a cyber incident can stall a practice at exactly the wrong moment, when a brief is due, a closing is scheduled, or a trial is underway. For a law firm, resilience therefore means more than backups. It means backups that are tested and known to restore, and a business-continuity plan sized to the reality that a firm may have very little tolerance for downtime when a deadline is near. It also means protecting information wherever the work happens, because attorneys do not confine their work to one office or one network.
The measure of a well-run law-firm environment is not that nothing ever goes wrong. It is that when something does, attorneys keep working, confidentiality holds, and the firm meets its obligations to the court and the client anyway. That outcome is the product of planning done in quiet periods, not heroics during a crisis.
Why Law Firms Choose Krantz
The firm’s fit with legal practices rests on a few durable advantages. More than forty years of experience since 1980 show up as judgment rather than guesswork. Support is responsive and high-touch, because attorneys and staff need issues resolved quickly and professionally. IT and cybersecurity are managed together under one coordinated strategy rather than as separate products. And the engagement can be fully managed or co-managed, so a firm gets exactly the level of partnership it needs. Krantz tends to fit best with firms that depend heavily on technology to serve clients, treat confidentiality and security as a business priority, and want proactive planning rather than reactive repairs.
Frequently Asked Questions
Do you support legal document management and practice applications?
Yes. Krantz supports the environment your document-management, practice-management, and related applications run on, and coordinates with those vendors so problems get solved rather than passed around between parties.
Can you help us protect privileged and confidential information?
Yes. We secure information across email, devices, Microsoft 365, and remote access, and help you put reasonable, documented safeguards in place, the kind clients, insurers, and courts increasingly expect a firm to be able to show.
Can attorneys work securely from court or while traveling?
Yes. We build secure remote access so attorneys and staff can reach files and communications from anywhere without compromising confidentiality, so the duty to protect client information travels with the work.
Can you work with our existing IT staff?
Yes. Krantz offers both fully managed and co-managed arrangements, so we can run everything or add security and strategic depth alongside your internal team without displacing what already works.
Key Facts
|
Related Resources
IT and cybersecurity for New York law firms
Cybersecurity services for New York businesses
Business continuity and disaster recovery planning
ABA resources on cybersecurity and the duty of confidentiality
FTC guidance on data security for businesses
Sources
- ABA resources on cybersecurity and the duty of confidentiality
- FTC guidance on data security for businesses
About Krantz Secure Technologies
Founded in 1980 and headquartered in New York City, Krantz Secure Technologies is a managed IT and cybersecurity firm serving operationally mature organizations across the New York metropolitan area. The company provides managed IT, cybersecurity, Microsoft 365 and cloud management, and business continuity through long-term, high-touch technology partnerships, with particular depth serving financial services, professional services, and other organizations that handle sensitive information.
For more information please visit: KrantzSecure.com
# # #
Attachment
NEWMEDIA.COM One World Trade Center 285 Fulton Street, Suite 8500, New York, NY 10007 212-220-6200 hello@newmedia.com
Media gallery
