--- title: "Survey Asks In-House Counsel For Their Cybersecurity Takes" id: "31507" type: "post" slug: "survey-asks-in-house-counsel-for-their-cybersecurity-takes" published_at: "2015-12-21T21:52:22+00:00" modified_at: "2026-03-16T15:14:16+00:00" url: "https://associationsnow.com/2015/12/21/survey-asks-in-house-counsel-for-their-cybersecurity-takes/" markdown_url: "https://associationsnow.com/2015/12/21/survey-asks-in-house-counsel-for-their-cybersecurity-takes.md" excerpt: "The Association of Corporate Counsel (ACC) Foundation surveyed more than 1,000 in-house counsel to get their take on cybersecurity and its effects on the profession." taxonomy_category: - "Ethics" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "Data Security" - "Legal" - "Technology" taxonomy_content_format: - "Article" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Survey Asks In-House Counsel For Their Cybersecurity Takes Cybersecurity and its potential risks and effects are reaching into almost every corner of organizations, including in-house counsel. A [new report (opens in a new tab)](http://www.acc.com/legalresources/resource.cfm?show=1416923) from the Association of Corporate Counsel (ACC) Foundation surveyed more than 1,000 in-house counsel to get their take on cybersecurity and found that one-third reported that their companies had experienced a data breach and more than half reported their companies are spending more on data security. “The State of Cybersecurity Report” also found areas where in-house counsel could be doing more to help prevent cyber breaches. For example, less than half of survey respondents reported that they had mandatory training on data security, which is significant given that the most common cause of data breaches are, reportedly, employee error. “Employees are not trained, and that’s certainly a role for in-house counsel,” said James Merklinger, ACC vice president and chief legal officer. General counsel or chief legal officers can advocate for adequate training for all employees in order to further awareness about the types of information that are most likely to be stolen and how to avoid breaches. Additionally, in-house counsel should ensure their companies have adequate insurance coverage should they face a cyber breach, and Merklinger advised mandating notifications from third-party vendors should they experience an attack. “Less than two-thirds [of respondents] said they require third parties to notify them of a breach,” Merklinger said. Yet, in-house counsel, “may have a legal requirement to notify their members of a breach, but if they don’t know something occurred, then they’re certainly are not going to be able to notify them.” While the survey provided insight into corporate counsel and its role in cybersecurity management, the survey was conducted as more of a public service than one relegated to a specific industry. “You don’t have to be a lawyer to appreciate this,” Merklinger said. “It happened to reach out to lawyers because we wanted to get their take.” But the importance of data security affects all industries and professions, including associations. “In an association the most valuable thing you have are your members,” Merklinger said. “So that personal information about them that people might want to steal is top of mind and a serious risk to associations.” (iStock/Thinkstock) [Katie Bascuas](https://associationsnow.com/author/katie-bascuas/) Katie Bascuas is a former associate editor at Associations Now in Washington, DC. [More articles by this author](https://associationsnow.com/author/katie-bascuas/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#Data Security](https://associationsnow.com/tag/data-security/) [#Legal](https://associationsnow.com/tag/legal/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [PodcastBringing AI to Life: Practical Steps for AssociationsFebruary 26, 2025](https://associationsnow.com/2025/02/26/bringing-ai-to-life-practical-steps-for-associations/) - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [TemplateMembers onlyEthics Toolkit for AssociationsMarch 31, 2025](https://associationsnow.com/2025/03/31/ethics-toolkit-for-associations/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2015%2F12%2F21%2Fsurvey-asks-in-house-counsel-for-their-cybersecurity-takes%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !