But there are several ways to mitigate those risks while still supporting and growing your international operations.
ENSURE PHYSICAL SAFETY IN HIGH-RISK JURISDICTIONS
Attorney travel poses multiple risks to an attorney and their firm. The most obvious risk is to the physical safety of the traveling attorney. In some cases, firms restrict or prohibit travel to high-risk jurisdictions, which are often identified by current news stories. Firms also can link their go/no-go travel decisions to the current set of countries subject to a U.S. Department of State travel warning. Such policies, however, need to be flexible in multiple directions.
Firms and attorneys can take actions to reduce physical risk in high-risk areas. They should also consider requiring certain mitigation efforts that will allow an attorney to travel to such places. At the same time, what should a firm do if, for example, violent protests break out in a location thought to be “safe?”
Attorneys should be encouraged, and perhaps offered training, to stay aware of their surroundings in any jurisdiction, keep current on local news and avoid spontaneous large public gatherings.
CONSIDER IMMIGRATION LAWS AND REGULATIONS
Firms must also consider whether an attorney’s planned activities in a country are consistent with relevant immigration laws and regulations. We’ve all been asked the purpose of our visit when we pass through immigration control. If traveling for vacation, the answer to such a question is apparent. The answer may be less apparent for business development-related travel.
In some jurisdictions, business travel does not require a visa or any other specific approval so long as the lawyer in question is not being paid inside that jurisdiction — this is usually the case with payments of legal fees to U.S.-based firms. Other countries require a visa to enter in connection with any kind of business travel.
It’s important for the firm and for the lawyer to get these questions right, not the least because of potential reputational damage.
MINIMIZE THREATS TO INFORMATION TECHNOLOGY SECURITY
Law firm management should be sure to review items an attorney takes on their international trip and clearly discuss the requirements to keep these items under control and secure. Questions to consider are:
- Is a hotel safe secure enough to store a laptop?
- Does a laptop’s encryption capacity trigger any concerns?
- What kinds of files should be made available when an attorney accesses a firm’s system from abroad?
Travel poses a threat to a firm’s information technology resources. A firm’s IT security program should block remote access from internet service providers (ISPs) in jurisdictions frequently used by threat actors. ISPs in Ireland, Belgium and the Netherlands are frequently used to launch cyberattacks around the world and are among the most common locations visited by U.S. lawyers. Cutting off a traveling lawyer from remote access isn’t a viable solution, so firms should develop a procedure on unblocking certain ISPs.
Management can work with their IT team to unblock ISPs by 1) identifying the specific ISP that the attorney will use, such as in a hotel, and 2) unblocking such ISP for a defined period. Firms can also enable a “kill switch” on attorneys’ mobile devices (or download an app that can do so), so information can be erased and access restricted in case the mobile device is lost or stolen. It is important to train attorneys on when and how to use such a kill switch.