About our course

Cyber Risk for Law Firms is an essential online training program designed to equip all employees across all areas of legal practice with practical cyber risk knowledge in clear, accessible language

Suitable for all lawyers and law firm employees, the course delivers up-to-the-minute education on cyber threats, email fraud, and best practices. It avoids jargon, using relatable scenarios and a logical structure to ensure engagement and real-world application.

📌 Course duration: ~60 minutes of video content + Q&A
Access period: 28 days under our standard T&Cs, allowing ample time for completion.

What you will learn

Our unique and up-to-the-minute course focuses on professional duties using real-life case studies impacting law firms and other businesses. You'll learn:

  • That managing cyber risk is a professional issue

  • Why cyber risk is everyone’s responsibility in a law firm

  • How cyber events and human error occur

  • Practical steps to protect yourself, your business and your clients

Course structure

  • Our interactive course is divided into ten concise chapters that you can work through at your own pace.

  • It contains ~60 minutes of video content, broken into shorter videos of around five minutes each.

  • There are several short quizzes to reinforce learnings as you progress through the course.

  • Participants must pass all the quizzes to receive a certificate of completion.

Updated content

Our most recent course update incorporates new developments in both technology and professional responsibility. Our updated content includes information about:

  • Dangers associated with advances in artificial intelligence, including the use of AI and deepfake videos and audio by cyber-criminals, and the risks of law firm employees breaching confidentiality using generative AI.

  • New professional rules relating to minimum expected cybersecurity standards.

  • Lessons learned from the largest data breach impacting an Australian law firm.

  • Latest updates on cybercrime and data breaches in Australian and globally.

As a sign of how important cyber education has become for all Australian legal practices: in Victoria, not educating staff who use work devices and networks on how to identify, report, and respond to cyberattacks or not providing staff with up-to-date cybersecurity training can now amount to unprofessional conduct or professional misconduct.

What our participants are saying:

  • “It's great that CPD is not just about the law anymore but more about how current events affect practice.”

  • “…all lawyers [should] have to do this as part of renewing practising certificate.”

  • “As a member of support staff, it was an excellent course and should be mandatory for all law firm employees.”

"As lawyers we need to understand the risks and impacts involved in cyberattacks both for our own cyber security and that of our clients. This course has provided us with practical, relatable and valuable information to enhance the knowledge of both our professional and support teams. We required every member of our teams nationwide complete this excellent course."

Geoffrey Connellan – National Managing Partner, Moray & Agnew Lawyers

Your Instructor - Simone Herbert-Lowe

Partner, Clyde & Co | Founder, Law & Cyber

Simone is a recognised leader in the field of cyber law, professional risk, and compliance. She helps businesses and professionals manage legal obligations, respond to cyber threats, and prevent losses caused by fraud, data breaches, and human error.

Simone's work is trusted by:

  • Professional indemnity insurers, legal regulators and financial services organisations
  • Courts (expert opinion, 2021) and Parliament (Committee evidence, 2024)
  • Major education and platform providers (including PEXA and CPD providers)


Her contributions have been recognised with:

  • Wanbil Lee Prize for Ethical Leadership in Business (AGSM, 2016)
  • Innovator of the Year – Lawyers Weekly Women in Law Awards (2022)
  • Thought Leader of the Year finalist (Lawyers Weekly Women in Law Awards 2022 & 2023)
  • Relativity Innovation Awards – Security finalist (2022 & 2023)


Simone is passionate about protecting Australians from cybercrime and helping organisations build a cyber-aware culture.



Troubleshooting & Tech Support

Check out our FAQs below.

  • The dashboard is saying that my 'email has already been taken'. What should I do?

    Welcome back! This means that you have signed up for a course or webinar with us before, and you will need to sign in using your previous password, or alternatively reset your password. Good news - there is an easy fix! At the login screen, above the red text that says 'Email has already been taken' you will see other underlined text that says 'I already have an account!'. Click on this text and follow the screen prompts to enter or reset your password.

  • Why isn't the course working on my computer?

    For the best course experience we recommend you use your desktop or laptop computer, and we recommend the following web browsers: Chrome, Firefox, Safari or Edge. Please note that the course platform does not support Internet Explorer. Very occasionally there can be browser-specific issues which are fixed by just using a different browser - simply log in where you left off on a previous browser.

  • I work in a position where I share a computer (such as reception). How do myself and my colleague/s complete the course?

    Individual user logins are uniquely linked to a single corresponding course certificate, meaning that only one certificate can be issued per email address. If, for example, two people at your firm share the same email, such as "reception@" your firm, please arrange for each user to enrol using a different email address so they can each obtain their individual certificate.

  • Who should I contact if I am having trouble logging into with the course?

    Please contact ## [LIV].

  • The course is playing, but why I can't hear anything?

    If you notice your videos are muted by default, this is a browser specific setting and you’ll simply need to enable audio on the video. We recommend using headphones for increased quality and volume.

  • Why can’t I rewind or fast forward during the chapter?

    Our course is designed to be an educational experience and not a "tick the box" compliance exercise. To ensure that certificates are only issued to those who interact with and complete the course, fast-forwarding of videos has been disabled. If you want to re-watch a short video, you can simply replay that chapter once it finishes.

  • I’ve finished the course, but I haven’t received my certificate. What should I do?

    Just make sure you have clicked through all of the final items after Chapter 10, which will trigger the generation of your Completion Certificate.

  • I finished the course, but would really like to watch it again - can I do that?

    Yes! You may gain additional learnings on subsequent viewings of the course. Simply return to your dashboard and start the course again, or select a specific chapter that you are interested in reviewing and press play.

Course curriculum

  • 1

    Chapter 01: Welcome

    • Using the course player

    • Introduction: Cyber Risk for Law Firms

  • 2

    Chapter 02: Cybercrime today and lawyers' professional duties

    • Cybercrime and lawyers' professional duties

  • 3

    Chapter 03: Impersonation fraud

    • Impersonation fraud

    • Check in

  • 4

    Chapter 04: Phishing

    • Phishing - Introduction

    • How to recognise phishing emails

    • Check in

  • 5

    Chapter 05: Securing your log-in credentials

    • Securing your log-in credentials

    • Check in

  • 6

    Chapter 06: Use of email to compromise other accounts

    • How email can be used to access other platforms

  • 7

    Chapter 07: Data theft, identity fraud, and the dark web

    • Data theft

    • Identity fraud and the dark web

  • 8

    Chapter 08: Cyber extortion

    • Cyber extortion

    • Can you spot a phishing message? Take this short quiz on the ACSC website (Optional content)

  • 9

    Chapter 09: Human error

    • Human error

    • Check in

  • 10

    Chapter 10: Summary & Addtional Resources

    • Course summary

    • One minute survey - help us provide the education that law firms need

    • Victorian Legal Services Board + Commissioner: Minimum Cybersecurity expectations

    • Password Checklist

    • Recognising Phishing Emails

  • 11

    About L & C

    • Author and Presenter

    • Our Education Portfolio