Frequently Asked Questions

Our courses:
focus on the human factors that increase your business’s exposure to cyber risk and provides education in language that participants can understand.

What are the key course outcomes?

Our course challenges common assumptions that can prevent both business owners and employees from taking the steps necessary to protect a business from cyber events and email fraud. Assumptions like:

We’re too small (or big) to be a target
You need to be a target to be a victim
Managing cyber risk is something I can leave to an IT department or consultant
I’m too senior/too junior for this to involve me personally

Through our CPD-eligible course you and your team will learn:

Managing cyber risk is a professional issue
Why cyber risk is everyone’s responsibility
How cyber events and human error occur
Practical steps to protect yourself, your business and your clients

Be sure to jump down to the bottom and read feedback on our online courses

Who is Law & Cyber?

Law & Cyber is committed to protecting Australians from cybercrime through education, legal advice and consultancy services. Our focus is where business risk, professional risk, and cyber risk intersect.

To date more than 8,000 business professionals have completed our online training customised to meet their business needs.

Our first online course Cyber Risk for Law Firms was launched in collaboration with LPLC in March 2020. LPLC, the professional indemnity insurer for Victorian legal practices and Australia’s largest law firms, recommended that every employee at each of its insured law practices complete our course.

Since then our courses Cyber Risk for Law Firms, Cyber Risk for Conveyancers, Cyber Risk in the Property Industry and Cyber Risk in the Built Environment have also been licenced or recommended by PEXA, the Australian Institute of Conveyancers (NSW, Victoria, and Western Australia), and Pointsbuild.

L&C was founded by Simone Herbert-Lowe, who brings to our training programs deep experience in legal and professional risk, cyber risk management and education, professional liability and insurance. Find out more about our expertise and experience here.

How is this course different to generic cyber training?

Our course goes deeper than generic cyber awareness training. You will learn how to identify and protect yourself, and your business, against common cyber threats and attacks, particularly as these relate to your own profession or industry. You’ll gain an understanding of principles and policies, commonly used authentication techniques, cyber security fundamentals and recognising signs of email-enabled fraud. The course provides practical ways to ensure safe working online and how to identify cyber security incident and business email compromise.

We discuss real life case studies and relatable hypotheticals to drive home the impact and legal consequences that cyber events can have on businesses, their customers and the community.

What is the guiding philosophy behind the training?

At L&C we believe that real life stories that are directly relevant and impactful for the audience, rather than “tick and flick” compliance videos, are the most persuasive way to achieve genuine and long-lasting behavioural change.

More than 90% of cyber attacks are launched via an email. Remote working has unfortunately led to increased risk through less face-to-face-interaction, greater reliance on email and increased distraction which all present opportunities for scammers and hackers. While education is vital, a key issue for businesses is to challenge common assumptions such as “my business is too small to be a target” or “my business is safe because we use anti-virus software” or “this would never happen to me”.

For behavioural change to occur, education needs to be practical, engaging and compelling. The more relevant, contextual and industry-specific the training scenarios, the more participants will understand "this could actually happen to me". Our course presents accounts of both individuals and businesses impacted by cyber events and outlines the consequences and legal issues that arise for the business.

Our team has already done cyber awareness training, and I’m conscious of the time and expense of doing more. Why should I pay for this?

According to Cybersecurity Ventures, cybercrime will lead to the biggest transfer of wealth in human history. Cybercrime is increasing every day and experts agree it is important not only to complete training, but to continually refresh and update existing knowledge.

Costs of a cyber incident to a business, its employees and owners can include:

Serious reputational damage
Damage to client relationships
Payment redirection fraud
Loss of data or even all your business records
Exposure of confidential information
Uninsured losses
Losses that are uncapped by limited liability schemes, which do not cover actions for breach of trust or breach of fiduciary duty.

The potential for law suits as a result of cyber breaches will only escalate, and plaintiffs’ lawyers will closely scrutinise steps taken by businesses to educate staff about this growing area of risk. Our course has been written by an expert in legal and professional duties and is designed to cover the key areas where cyber risk, and business and professional risk intersect.

Increased regulation for company directors, managers and businesses who fail to take adequate steps to ensure cybersecurity in the business all mean that cybersecurity awareness needs to be addressed in a holistic and meaningful way rather than a compliance-only based approach.

How is the course content tailored?

You will learn about risks relating to cybercrime, information security and human error in the context of your unique legal and/or professional obligations in your profession or industry.

For example, a significant risk for all professionals comes from email-enabled impersonation fraud. Our course explains how to recognise this type of fraud and what processes can be incorporated to prevent you and your business becoming a statistic or, even worse, a headline. To provide relatable context, we use real life examples that have impacted other businesses and professionals.

What feedback have you received from participants and clients?

Since 2020, more than 8,000 business professionals have completed our online training courses, and of those nearly 3,000 also completed our course satisfaction survey. To summarise:

98% of participants agreed the course increased their understanding of cyber risk.
96% of participants liked the way the course was structured.
93% of participants found the course content appropriate for their needs.
92% of participants said they would recommend our course to others.

Feedback received demonstrates the value participants find in our course structure, content and approach.

Is the course suitable for large or small business?

The short answer - both. Our courses are practical, relatable, engaging and current. They include real life case studies across small, medium and large enterprises, with hypotheticals that explain the legal implications of cyber breaches. Furthermore, these case studies are suitable and relatable for every member of your team across your whole business.

Our clients have included businesses of all sizes from solo operators to large national law firms.

“As lawyers we need to understand the risks and impacts involved in cyberattacks both for our own cyber security and that of our clients. This course has provided us with practical, relatable and valuable information to enhance the knowledge of both our professional and support teams. We required every member of our teams nationwide complete this excellent course.”

— Geoffrey Connellan –

National Managing Partner, Moray & Agnew Lawyers
Course: Cyber Risk for Law Firms

Are bulk purchases available for companies wanting to enrol multiple staff?

Yes. Instead of individual payments we can issue a tax invoice for an agreed number of registrations. Upon payment your organisation will receive a customised link for your team to use in order to enrol seamlessly. These purchase arrangements can also include reports about successful completions and you can continue to enrol staff using the same link in the future. Contact us here to enquire.

Are discounts available for multiple enrolments?

Discounts for more than 20 enrolments are available on request.

Pricing may depend on the number of participants and your preferred level of reporting. Contact us here for further details.

Can the course be customised to incorporate our branding and other content?

Absolutely! Your business’s branding and colour palette can be incorporated on the course chapter pages and slides, which you might find of value if you intend on sharing the course with your clients.

We can also upload relevant documents you wish to include for staff, or further tailor or edit the course.

Separate pricing will apply depending on the level of customisation requested.

Is it possible to upload the course to our own Learning Management System?

Yes. Available options include:

Enrolments using a unique link to our course platform
Including a link to our course on your LMS, enabling you to keep your own attendance records
Sharing our files for uploading to your own LMS

Sharing files requires a formal licence agreement which is available on request.

I would like to make the course mandatory for all our employees – are you able to provide reports confirming which staff members have completed the course?

Yes. Other businesses have also made our course mandatory for all employees and we can provide you with weekly reports to facilitate your compliance needs.

Our standard pricing includes:

A report on enrolments and successful completions after the first week, to confirm all aspects of user experience are working as expected
A monthly report on enrolments and successful completions.

Additional reporting and student follow ups are available on request (an additional fee may apply).