Cravath, Swaine & Moore LLP is a premier U.S. law firm, founded in 1819, providing legal services across corporate, litigation, tax, executive compensation and benefits, and trusts and estates. Its offices are located in New York, London, and Washington, D.C.
The firm's threat model is fundamentally about protecting client confidentiality and maintaining the integrity of massive, high-stakes transactional and litigation data flows. The cybersecurity function within a firm of this stature must secure privileged communications, manage insider risk across deal teams, and defend against nation-state actors and sophisticated adversaries targeting the legal sector for strategic intelligence.
A security team here operates at the intersection of information governance and technical defense, likely focused on securing document management systems, email encryption, secure client portals, and endpoint protection across a highly mobile workforce. The work is less about product security and more about data security, compliance, and ensuring the operational resilience of the firm's core practice.
