THIS ISSUE'S HEADLINES

Cybersecurity in 2025 – A Shifting Landscape

Why Business Succession Planning Should Be a Priority in 2025


CYBERSECURITY IN 2025 – A SHIFTING LANDSCAPE

The biggest cybersecurity risk that businesses faced years ago was losing access to their data due to a ransomware attack where a hacker would lock up a company’s files and only release them back if a ransom was paid. Wisely, many businesses responded to these threats by creating redundancies in their systems that were frequently backed up so that the worst case scenario would be that the business lost a few days’ worth of data. As a result, these classic ransomware attacks are now less lucrative to the bad actors, so they have shifted their focus to stealing data from businesses and threatening to post that data on the “dark web” unless a ransom is paid. This so-called “double extortion” attack is the biggest cybersecurity threat facing businesses in 2025.

As we enter the new year, recent high-profile data breaches serve as a stark reminder of the critical importance of cybersecurity in protecting sensitive corporate information. Cyber threats are evolving in sophistication and scale, and organizations must remain proactive in mitigating risks. Here are 20 best practices and tips to keep in mind in 2025:

1. Partner with cybersecurity firms for audits, monitoring, and forensic analysis.
2. Identify and assess vulnerabilities in your IT infrastructure.
3. Perform penetration testing and vulnerability scans to identify weaknesses before attackers can exploit them.
4. Update your risk assessment strategy to account for new threats and technologies.
5. Enforce strong password policies and multifactor authentication (MFA) for all systems.
6. Regularly review and limit access to sensitive data based on employees’ roles.
7. Monitor for unauthorized access attempts and respond promptly.
8. Encrypt sensitive data both in transit and at rest to the maximum extent possible.
9. Maintain a secure data backup system and test the recovery process regularly.
10. Implement data classification policies to ensure appropriate handling of confidential information.
11. Regularly review the amount, age, and types of data you are storing. Cheap electronic or cloud storage makes it easy for companies to become “digital packrats,” thus increasing the stakes (and cost) in the event of a data breach.
12. Remember that the weakest links in any IT environment are most often the people who operate in that environment (i.e., your employees).
    
13. Educate employees on recognizing phishing attempts, social engineering, and other common attack methods.
14. Conduct regular cybersecurity training sessions and simulated attacks to reinforce awareness.
15. Establish clear procedures for reporting suspected incidents.
16. Stay informed about emerging threats and regulatory changes through professional networks and updates.
17. Evaluate your cybersecurity insurance policies to ensure adequate coverage against potential losses from breaches and compliance fines.
18. Take advantage of any free training or audit services that your insurance company offers to minimize the chances of a data breach.
19. Regularly evaluate the cybersecurity practices of third-party vendors and partners who have access to your systems or data. Establish clear security requirements and ensure compliance with contractual agreements.
20. Review your vendor and supplier contracts to determine if you can shift or share the risks associated with a data breach.

While you cannot completely shed responsibility for what happens to data that you are legally obligated to protect, you can create and pursue potential avenues of recovery against others in the event of a data incident involving your systems.

Brian J. Lamoureux is a Partner on the Firm’s Litigation, Employment, and Cybersecurity teams. He can be reached at bjl@pldolaw.com or 401-824-5155.

[back to top]


WHY BUSINESS SUCCESSION PLANNING SHOULD BE A PRIORITY IN 2025

Succession planning is a vital yet often neglected component of a comprehensive business strategy. Whether it is a start-up or a ten-year-old business, developing a succession plan is a critical step in ensuring the continuity and long-term stability of any business. As we step into a new year, now is an opportune time for business owners to reassess their goals and prepare for the future. Below are the key steps for developing an effective succession plan:

Identify Goals and Priorities: The first step is to clarify the vision for the business’s future. Should the company remain family-owned or closely held? Should it be transitioned to key employees or be sold to external buyers? Defining the goals now eliminates confusion and conflict in the future. If a business has more than one owner, it will be important to build consensus, overcome any reluctance by current leaders to relinquish control, and address any perceived threats to existing power structures. Organizational dynamics often pose a challenge. The owner(s) should emphasize that a succession plan is designed to strengthen the company's long-term position, not to disrupt existing relationships or undermine authority.

Distinguish Potential Successors: It is essential to identify members of the next generation who not only possess leadership skills, but also have a willingness and desire to grow in the company. Obtaining feedback from a variety of sources (ex: board members, management, employees and customers) is important for a well-rounded view. Ideal candidates will have a track record of success, strong problem-solving skills, and the ability to inspire others. Providing opportunities for candidates to demonstrate their leadership abilities, make critical decisions and manage business challenges by delegating high-level projects and/or initiatives is another way to assess potential successors. A comprehensive assessment should not only include candidates’ strengths but also areas that require improvement. If the company struggles to identify suitable candidates from within, it will be necessary to seek outside talent, while offering training and development opportunities to build a stronger internal talent pool.

Implement a Leadership Development Program: Developing a talent pipeline to ensure a steady flow of high-potential candidates is critical, and creating a leadership development and mentoring program to nurture and retain top talent will make the process easier. Mentoring programs expose employees to all the various aspects of the business and help facilitate the transfer of knowledge and insights to future leaders. Clearly communicating what will be expected from potential successors, encouraging open dialogue, and providing consistent feedback will help prepare successors for their future roles.

Formalize the Plan: In addition to consulting with key stakeholders within the business, the owner(s) should consult with external legal, financial, and business advisors. As soon as there is consensus and approval, the next step is to formalize the business succession plan, define clear milestones, establish timelines for the transfer of responsibilities, and include contingency scenarios to address potential obstacles. A comprehensive written plan eliminates ambiguity and provides a clear roadmap for all involved.

Review and Adapt Regularly: Businesses evolve, and so should succession plans. It will be important to revisit the plan annually and/or when there are major changes within the organization. By implementing a regular review cycle to assess the progress of successor candidates and the business landscape, the owner(s) can ensure the succession plan remains relevant and purposeful.

Making Succession Planning a Priority: Life is unpredictable, and unforeseen events such as illness, retirement, or sudden departure can disrupt operations. A succession plan provides a clear roadmap to maintain stability during transitions, preserves the legacy of the owner(s), and minimize financial risks. However, succession planning is not just about mitigating risks—it’s about setting the stage for sustainable growth and success. It’s also beneficial in fostering confidence in the organization. Employees value job security. Knowing that a succession plan is in place can boost morale, productivity, and loyalty.

Let this new year be the time you prioritize your business’s longevity and legacy. If you have questions or would like further information on succession planning, please contact PLDO Principal Gary R. Pannone at 401-824-5100 or email gpannone@pldolaw.com.

[back to top]