header-logo header-logo

*Partner copy* Cyber-attacks: detect & respond

17 February 2023 / David Allan
Issue: 8013 / Categories: Features , Technology , Cyber , Cybercrime , Legal services , Profession , Criminal
printer mail-detail
“Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors.” Q&A with David Allan, founder and Managing Director at CYSIAM

How is CYSIAM helping law firms detect cyber-attacks and respond to them?  

We provide one of the few entirely UK-based, 24/7/365 Security Operations Centres (SOC) to deliver Managed Detection and Response (MDR) services. Our MDR services combine extensive cyber threat intelligence with expert security analysts, proactive threat hunters, and best-in-class technology platforms, providing a fully outsourced one-stop security partner.

Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors. This insight allows us to then get proactive in identifying unique legal sector threats ahead of time and implementing the appropriate cyber resilience measures.

This service, underpinned by our expert consultancy and incident response teams, gives our clients the confidence to drive their business forward, knowing that CYSIAM has their backs.

How severe is the current cyber threat to the UK legal sector?  

We know that reputation is important to law firms; however, so do the attackers. We see an increase in extortion in the legal sector due to the economies of scale that an attacker can gain from compromising the sensitive client data or trust that is critical to law firms. The opportunity to exploit the legal sector has grown with the accelerated adoption of digital technologies in a historically paper-based sector. This, along with the increased sophistication of cyber criminals, means the threat to the UK legal sector is high.

Do you see a proportionate increase in exec-level awareness and cyber security budgets?

Yes, we see senior executives in law firms demanding more proactive strategies and not relying on an ‘it won’t happen to us’ approach. Regulations and standards are now also starting to be much more specific around what is expected of organisations, particularly those that handle very sensitive data. Too often though, it still takes a serious incident to initiate the required culture at a senior level.

How do you help firms understand their current cyber maturity and level of risk? 

CYSIAM has developed its own risk assessment framework based on industry standards which we use throughout our client engagements. This provides an efficient and well-rounded overview of the law firm’s current level of maturity and associated risk.

The seven key areas covered are:

(1) Governance

(2) Policy and procedure

(3) Technology

(4) Data handling

(5) Culture and education

(6) Physical environment

(7) Supply chain

The output of this risk assessment provides an ideal baseline for firms of all sizes on which to build an effective cyber security resilience programme.

We also have qualified consultants who can help with common industry standards such as NIST and ISO27001.

Where are you based and what type of clients do you work with? 

Our technical HQ is just outside Milton Keynes, we have a liaison office in London but we’re based throughout the UK and deliver consultancy projects globally. We are currently providing MDR services and cybersecurity consultancy to law firms, housing associations, technology companies, central government, local authorities, law enforcement, healthcare providers, private equity and top-tier consulting firms.

What makes CYSIAM different from the average provider? 

Our in-depth understanding of the cyber threat the world faces is unparalleled. Our team have decades of experience in delivering a step change in capability for our partners in the UK and overseas. We work with governments around the world to build national defences against state-level threats and in the last four years, have delivered sustainable impact in over 25 countries.

We understand the unique risks to the legal sector and can translate our experience from law enforcement, military intelligence and national security backgrounds to identify and mitigate the threats. We combine this with specialist expertise to deliver threat-led and proactive managed security services tailored to the UK’s legal sector, including 24/7/365 MDR services.

Our fantastic team are all vetted and our partnership-by-default approach makes us the ideal partner to help you succeed and prosper in the digital age.

Contact us at: info@cysiam.com

Join our free 60-minute Panel Discussion on 21st March 2023 at 12.00
when our panel of legal and cyber experts will explore the important tasks of preparing, planning, and practising your response to cyber-attacks.
Visit www.eventbrite.co.uk/e/523452529607 to sign up for the event.

MOVERS & SHAKERS

BCL Solicitors—Robert Lawrie

BCL Solicitors—Robert Lawrie

Commercial disputes team lead promoted to partner

Mourant—Tom Fothergill

Mourant—Tom Fothergill

Jersey finance and corporate practice welcomes new partner

Shakespeare Martineau—Solicitor apprentices

Shakespeare Martineau—Solicitor apprentices

Firm launches solicitor apprenticeship programme with inaugural cohort

NEWS
Government plans for offender ‘restriction zones’ risk creating ‘digital cages’ that blur punishment with surveillance, warns Henrietta Ronson, partner at Corker Binning, in this week's issue of NLJ
Louise Uphill, senior associate at Moore Barlow LLP, dissects the faltering rollout of the Leasehold and Freehold Reform Act 2024 in this week's NLJ
Judgments are ‘worthless without enforcement’, says HHJ Karen Walden-Smith, senior circuit judge and chair of the Civil Justice Council’s enforcement working group. In this week's NLJ, she breaks down the CJC’s April 2025 report, which identified systemic flaws and proposed 39 reforms, from modernising procedures to protecting vulnerable debtors
Writing in NLJ this week, Katherine Harding and Charlotte Finley of Penningtons Manches Cooper examine Standish v Standish [2025] UKSC 26, the Supreme Court ruling that narrowed what counts as matrimonial property, and its potential impact upon claims under the Inheritance (Provision for Family and Dependants) Act 1975
In this week's NLJ, Dr Jon Robins, editor of The Justice Gap and lecturer at Brighton University, reports on a campaign to posthumously exonerate Christine Keeler. 60 years after her perjury conviction, Keeler’s son Seymour Platt has petitioned the king to exercise the royal prerogative of mercy, arguing she was a victim of violence and moral hypocrisy, not deceit. Supported by Felicity Gerry KC, the dossier brands the conviction 'the ultimate in slut-shaming'
back-to-top-scroll