header-logo header-logo

*Partner copy* Cyber-attacks: detect & respond

17 February 2023 / David Allan
Issue: 8013 / Categories: Features , Technology , Cyber , Cybercrime , Legal services , Profession , Criminal
printer mail-detail
“Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors.” Q&A with David Allan, founder and Managing Director at CYSIAM

How is CYSIAM helping law firms detect cyber-attacks and respond to them?  

We provide one of the few entirely UK-based, 24/7/365 Security Operations Centres (SOC) to deliver Managed Detection and Response (MDR) services. Our MDR services combine extensive cyber threat intelligence with expert security analysts, proactive threat hunters, and best-in-class technology platforms, providing a fully outsourced one-stop security partner.

Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors. This insight allows us to then get proactive in identifying unique legal sector threats ahead of time and implementing the appropriate cyber resilience measures.

This service, underpinned by our expert consultancy and incident response teams, gives our clients the confidence to drive their business forward, knowing that CYSIAM has their backs.

How severe is the current cyber threat to the UK legal sector?  

We know that reputation is important to law firms; however, so do the attackers. We see an increase in extortion in the legal sector due to the economies of scale that an attacker can gain from compromising the sensitive client data or trust that is critical to law firms. The opportunity to exploit the legal sector has grown with the accelerated adoption of digital technologies in a historically paper-based sector. This, along with the increased sophistication of cyber criminals, means the threat to the UK legal sector is high.

Do you see a proportionate increase in exec-level awareness and cyber security budgets?

Yes, we see senior executives in law firms demanding more proactive strategies and not relying on an ‘it won’t happen to us’ approach. Regulations and standards are now also starting to be much more specific around what is expected of organisations, particularly those that handle very sensitive data. Too often though, it still takes a serious incident to initiate the required culture at a senior level.

How do you help firms understand their current cyber maturity and level of risk? 

CYSIAM has developed its own risk assessment framework based on industry standards which we use throughout our client engagements. This provides an efficient and well-rounded overview of the law firm’s current level of maturity and associated risk.

The seven key areas covered are:

(1) Governance

(2) Policy and procedure

(3) Technology

(4) Data handling

(5) Culture and education

(6) Physical environment

(7) Supply chain

The output of this risk assessment provides an ideal baseline for firms of all sizes on which to build an effective cyber security resilience programme.

We also have qualified consultants who can help with common industry standards such as NIST and ISO27001.

Where are you based and what type of clients do you work with? 

Our technical HQ is just outside Milton Keynes, we have a liaison office in London but we’re based throughout the UK and deliver consultancy projects globally. We are currently providing MDR services and cybersecurity consultancy to law firms, housing associations, technology companies, central government, local authorities, law enforcement, healthcare providers, private equity and top-tier consulting firms.

What makes CYSIAM different from the average provider? 

Our in-depth understanding of the cyber threat the world faces is unparalleled. Our team have decades of experience in delivering a step change in capability for our partners in the UK and overseas. We work with governments around the world to build national defences against state-level threats and in the last four years, have delivered sustainable impact in over 25 countries.

We understand the unique risks to the legal sector and can translate our experience from law enforcement, military intelligence and national security backgrounds to identify and mitigate the threats. We combine this with specialist expertise to deliver threat-led and proactive managed security services tailored to the UK’s legal sector, including 24/7/365 MDR services.

Our fantastic team are all vetted and our partnership-by-default approach makes us the ideal partner to help you succeed and prosper in the digital age.

Contact us at: info@cysiam.com

Join our free 60-minute Panel Discussion on 21st March 2023 at 12.00
when our panel of legal and cyber experts will explore the important tasks of preparing, planning, and practising your response to cyber-attacks.
Visit www.eventbrite.co.uk/e/523452529607 to sign up for the event.

MOVERS & SHAKERS

FOIL—Bridget Tatham

FOIL—Bridget Tatham

Forum of Insurance Lawyers elects president for 2026

Gibson Dunn—Robbie Sinclair

Gibson Dunn—Robbie Sinclair

Partner joinslabour and employment practice in London

Muckle LLP—Ella Johnson

Muckle LLP—Ella Johnson

Real estate dispute resolution team welcomes newly qualified solicitor

NEWS
Solicitors are installing panic buttons and thumb print scanners due to ‘systemic and rising’ intimidation including death and arson threats from clients
Ministers’ decision to scrap plans for their Labour manifesto pledge of day one protection from unfair dismissal was entirely predictable, employment lawyers have said
Cryptocurrency is reshaping financial remedy cases, warns Robert Webster of Maguire Family Law in NLJ this week. Digital assets—concealable, volatile and hard to trace—are fuelling suspicions of hidden wealth, yet Form E still lacks a section for crypto-disclosure
NLJ columnist Stephen Gold surveys a flurry of procedural reforms in his latest 'Civil way' column
Paper cyber-incident plans are useless once ransomware strikes, argues Jack Morris of Epiq in NLJ this week
back-to-top-scroll