Risk Management and Liability Flashcards
7 cards from real ALA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Management and Liability flashcards as text
A law firm's engagement letter should include which element to most effectively limit the firm's malpractice exposure?
Answer: A clear scope-of-representation clause
A well-defined scope-of-representation clause sets boundaries on what the firm has agreed to do, reducing the risk of claims based on work outside the agreed engagement.
Under the ABA Model Rules, an attorney's duty of confidentiality extends to:
Answer: All information relating to the representation, regardless of source
Model Rule 1.6 broadly protects all information relating to the representation, not just privileged communications, requiring careful information-handling risk controls.
A firm discovers that a departing associate emailed client files to a personal account. The FIRST step in the incident response process should be:
Answer: Contain the breach and preserve evidence
The first step in any incident response is containment—stopping further exposure and preserving evidence—before notifications or other remediation steps are taken.
Which concept describes the minimum acceptable level of risk that a law firm's leadership is willing to tolerate before taking corrective action?
Answer: Risk appetite
Risk appetite is the amount and type of risk an organization is prepared to pursue, retain, or take, distinct from risk tolerance which defines acceptable variance around objectives.
A CLM is reviewing insurance renewals and notices the current policy has a 'claims-made' trigger. What does this mean?
Answer: Coverage applies when the claim is reported during the active policy period
A claims-made policy provides coverage only when the claim is both made against the insured and reported to the insurer during the policy period, unlike occurrence-based policies.
A law firm's business continuity plan (BCP) PRIMARILY aims to:
Answer: Ensure critical operations can continue during and after a disruption
A BCP focuses on maintaining essential functions and restoring operations after a disruption, not preventing all risks from materializing.
Which of the following BEST illustrates 'residual risk' in a law firm context?
Answer: The risk that remains after implementing mitigation controls
Residual risk is the remaining exposure after risk controls and mitigations have been applied; it represents what the firm still must accept or manage.