header-logo header-logo

17 February 2023 / David Allan
Issue: 8013 / Categories: Features , Technology , Cyber , Cybercrime , Legal services , Profession , Criminal
printer mail-detail

*Partner copy* Cyber-attacks: detect & respond

“Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors.” Q&A with David Allan, founder and Managing Director at CYSIAM

How is CYSIAM helping law firms detect cyber-attacks and respond to them?  

We provide one of the few entirely UK-based, 24/7/365 Security Operations Centres (SOC) to deliver Managed Detection and Response (MDR) services. Our MDR services combine extensive cyber threat intelligence with expert security analysts, proactive threat hunters, and best-in-class technology platforms, providing a fully outsourced one-stop security partner.

Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors. This insight allows us to then get proactive in identifying unique legal sector threats ahead of time and implementing the appropriate cyber resilience measures.

This service, underpinned by our expert consultancy and incident response teams, gives our clients the confidence to drive their business forward, knowing that CYSIAM has their backs.

How severe is the current cyber threat to the UK legal sector?  

We know that reputation is important to law firms; however, so do the attackers. We see an increase in extortion in the legal sector due to the economies of scale that an attacker can gain from compromising the sensitive client data or trust that is critical to law firms. The opportunity to exploit the legal sector has grown with the accelerated adoption of digital technologies in a historically paper-based sector. This, along with the increased sophistication of cyber criminals, means the threat to the UK legal sector is high.

Do you see a proportionate increase in exec-level awareness and cyber security budgets?

Yes, we see senior executives in law firms demanding more proactive strategies and not relying on an ‘it won’t happen to us’ approach. Regulations and standards are now also starting to be much more specific around what is expected of organisations, particularly those that handle very sensitive data. Too often though, it still takes a serious incident to initiate the required culture at a senior level.

How do you help firms understand their current cyber maturity and level of risk? 

CYSIAM has developed its own risk assessment framework based on industry standards which we use throughout our client engagements. This provides an efficient and well-rounded overview of the law firm’s current level of maturity and associated risk.

The seven key areas covered are:

(1) Governance

(2) Policy and procedure

(3) Technology

(4) Data handling

(5) Culture and education

(6) Physical environment

(7) Supply chain

The output of this risk assessment provides an ideal baseline for firms of all sizes on which to build an effective cyber security resilience programme.

We also have qualified consultants who can help with common industry standards such as NIST and ISO27001.

Where are you based and what type of clients do you work with? 

Our technical HQ is just outside Milton Keynes, we have a liaison office in London but we’re based throughout the UK and deliver consultancy projects globally. We are currently providing MDR services and cybersecurity consultancy to law firms, housing associations, technology companies, central government, local authorities, law enforcement, healthcare providers, private equity and top-tier consulting firms.

What makes CYSIAM different from the average provider? 

Our in-depth understanding of the cyber threat the world faces is unparalleled. Our team have decades of experience in delivering a step change in capability for our partners in the UK and overseas. We work with governments around the world to build national defences against state-level threats and in the last four years, have delivered sustainable impact in over 25 countries.

We understand the unique risks to the legal sector and can translate our experience from law enforcement, military intelligence and national security backgrounds to identify and mitigate the threats. We combine this with specialist expertise to deliver threat-led and proactive managed security services tailored to the UK’s legal sector, including 24/7/365 MDR services.

Our fantastic team are all vetted and our partnership-by-default approach makes us the ideal partner to help you succeed and prosper in the digital age.

Contact us at: info@cysiam.com

Join our free 60-minute Panel Discussion on 21st March 2023 at 12.00
when our panel of legal and cyber experts will explore the important tasks of preparing, planning, and practising your response to cyber-attacks.
Visit www.eventbrite.co.uk/e/523452529607 to sign up for the event.

MOVERS & SHAKERS

Switalskis—Naila Arif, Harriet Findlay & Ellie Thompson

Switalskis—Naila Arif, Harriet Findlay & Ellie Thompson

Firm awards training contracts to paralegals through internal programme

Ward Hadaway—Matthew Morton

Ward Hadaway—Matthew Morton

Private client disputes specialist joins commercial litigation team

Thomson Hayton Winkley—Nina Hood

Thomson Hayton Winkley—Nina Hood

Cumbria firm appoints new head of residential property

NEWS
Freezing orders in divorce proceedings can unexpectedly ensnare third parties and disrupt businesses. In NLJ this week, Lucy James of Trowers & Hamlins explains how these orders—dubbed a ‘nuclear weapon’—preserve assets but can extend far beyond spouses to companies and business partners 
A Court of Appeal ruling has clarified that ‘rent’ must be monetary—excluding tenants paid in labour from statutory protection. In this week's NLJ, James Naylor explains Garraway v Phillips, where a tenant worked two days a week instead of paying rent
Three men wrongly imprisoned for a combined 77 years have been released—yet received ‘not a penny’ in compensation, exposing deep flaws in the justice system. Writing in NLJ this week, Dr Jon Robins reports on Justin Plummer, Oliver Campbell and Peter Sullivan, whose convictions collapsed amid discredited forensics, ‘oppressive’ police interviews and unreliable ‘cell confessions’
A quiet month for employment cases still delivers key legal clarifications. In his latest Employment Law Brief for NLJ, Ian Smith reports that whistleblowing protection remains intact even where disclosures are partly self-serving, provided the worker reasonably believes they serve the ‘public interest’ 
Family law must shift from conflict-driven litigation to child-centred problem-solving, according to a major new report. Writing in NLJ this week, Caroline Bowden of Anthony Gold outlines findings showing overwhelming support for reform, with 92% agreeing lawyers owe duties to children as well as clients
back-to-top-scroll