law firm risk