Researchers: Nearly half of companies call in lawyers to lead the investigation, relying on their expertise to navigate regulatory requirements, hire outside consultants, and write final reports. The strategy may protect companies in the case of a lawsuit, since much of a legal firm’s research would be considered privileged information. Cybersecurity-services firm CrowdStrike found that almost half of incident-response engagements (49%) are now requested by outside attorneys. Cyber insurance claims have increased by 18% in the past year, according to an insurance firm.”]