More law firms are allowing their lawyers and staff to work remotely even after initial COVID-19 restrictions have subsided. But with greater flexibility comes greater responsibility. As the lines are blurring between work and personal electronics, chief information officers and cybersecurity providers are advising firms to adjust their bring your own device (BYOD) protocols and heighten cybersecurity training. It's clear that for some, the BYOD policies and training of the past just won't cut it in today's market. 

To be sure, most law firms' had a BYOD program before COVID-19. However, most BYOD policies didn't apply to all staffers, said Mark Sangster, vice president and industry security strategist for managed cybersecurity service provider eSentire Inc.

"BYOD has been around for 10 years. I don't think it's a massive step. I think it's more about formalizing it," said Sangster. "It may have gone from privileged users, partners and rainmakers, to now you're expanding it across the organization. You want to make sure it's formal."