There's a fine line between being pessimistic and being pragmatic. But when it comes to law firm cybersecurity, it's hard find any daylight between the two. For many lawyers, having to deal with a cyber incident is often a matter "when, not if." But that doesn't mean they're giving up protecting their data and IT assets. In fact, such a seemingly defeatist attitude is actually an asset when it comes to cybersecurity.