header-logo header-logo

*Partner copy* Cyber-attacks: detect & respond

17 February 2023 / David Allan
Issue: 8013 / Categories: Features , Technology , Cyber , Cybercrime , Legal services , Profession , Criminal
printer mail-detail
“Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors.” Q&A with David Allan, founder and Managing Director at CYSIAM

How is CYSIAM helping law firms detect cyber-attacks and respond to them?  

We provide one of the few entirely UK-based, 24/7/365 Security Operations Centres (SOC) to deliver Managed Detection and Response (MDR) services. Our MDR services combine extensive cyber threat intelligence with expert security analysts, proactive threat hunters, and best-in-class technology platforms, providing a fully outsourced one-stop security partner.

Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors. This insight allows us to then get proactive in identifying unique legal sector threats ahead of time and implementing the appropriate cyber resilience measures.

This service, underpinned by our expert consultancy and incident response teams, gives our clients the confidence to drive their business forward, knowing that CYSIAM has their backs.

How severe is the current cyber threat to the UK legal sector?  

We know that reputation is important to law firms; however, so do the attackers. We see an increase in extortion in the legal sector due to the economies of scale that an attacker can gain from compromising the sensitive client data or trust that is critical to law firms. The opportunity to exploit the legal sector has grown with the accelerated adoption of digital technologies in a historically paper-based sector. This, along with the increased sophistication of cyber criminals, means the threat to the UK legal sector is high.

Do you see a proportionate increase in exec-level awareness and cyber security budgets?

Yes, we see senior executives in law firms demanding more proactive strategies and not relying on an ‘it won’t happen to us’ approach. Regulations and standards are now also starting to be much more specific around what is expected of organisations, particularly those that handle very sensitive data. Too often though, it still takes a serious incident to initiate the required culture at a senior level.

How do you help firms understand their current cyber maturity and level of risk? 

CYSIAM has developed its own risk assessment framework based on industry standards which we use throughout our client engagements. This provides an efficient and well-rounded overview of the law firm’s current level of maturity and associated risk.

The seven key areas covered are:

(1) Governance

(2) Policy and procedure

(3) Technology

(4) Data handling

(5) Culture and education

(6) Physical environment

(7) Supply chain

The output of this risk assessment provides an ideal baseline for firms of all sizes on which to build an effective cyber security resilience programme.

We also have qualified consultants who can help with common industry standards such as NIST and ISO27001.

Where are you based and what type of clients do you work with? 

Our technical HQ is just outside Milton Keynes, we have a liaison office in London but we’re based throughout the UK and deliver consultancy projects globally. We are currently providing MDR services and cybersecurity consultancy to law firms, housing associations, technology companies, central government, local authorities, law enforcement, healthcare providers, private equity and top-tier consulting firms.

What makes CYSIAM different from the average provider? 

Our in-depth understanding of the cyber threat the world faces is unparalleled. Our team have decades of experience in delivering a step change in capability for our partners in the UK and overseas. We work with governments around the world to build national defences against state-level threats and in the last four years, have delivered sustainable impact in over 25 countries.

We understand the unique risks to the legal sector and can translate our experience from law enforcement, military intelligence and national security backgrounds to identify and mitigate the threats. We combine this with specialist expertise to deliver threat-led and proactive managed security services tailored to the UK’s legal sector, including 24/7/365 MDR services.

Our fantastic team are all vetted and our partnership-by-default approach makes us the ideal partner to help you succeed and prosper in the digital age.

Contact us at: info@cysiam.com

Join our free 60-minute Panel Discussion on 21st March 2023 at 12.00
when our panel of legal and cyber experts will explore the important tasks of preparing, planning, and practising your response to cyber-attacks.
Visit www.eventbrite.co.uk/e/523452529607 to sign up for the event.

MOVERS & SHAKERS

NLJ career profile: Liz McGrath KC

NLJ career profile: Liz McGrath KC

A good book, a glass of chilled Albarino, and being creative for pleasure help Liz McGrath balance the rigours of complex bundles and being Head of Chambers

Burges Salmon—Matthew Hancock-Jones

Burges Salmon—Matthew Hancock-Jones

Firm welcomes director in its financial services financial regulatory team

Gateley Legal—Sam Meiklejohn

Gateley Legal—Sam Meiklejohn

Partner appointment in firm’s equity capital markets team

NEWS

Walkers and runners will take in some of London’s finest views at the 16th annual charity event

Law school partners with charity to give free assistance to litigants in need

Could the Labour government usher in a new era for digital assets, ask Keith Oliver, head of international, and Amalia Neenan FitzGerald, associate, Peters & Peters, in this week’s NLJ

An extra bit is being added to case citations to show the pecking order of the judges concerned. Former district judge Stephen Gold has the details, in his ‘Civil way’ column in this week’s NLJ

The Labour government’s position on alternative dispute resolution (ADR) is not yet clear

back-to-top-scroll