header-logo header-logo

17 February 2023 / David Allan
Issue: 8013 / Categories: Features , Technology , Cyber , Cybercrime , Legal services , Profession , Criminal
printer mail-detail

*Partner copy* Cyber-attacks: detect & respond

“Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors.” Q&A with David Allan, founder and Managing Director at CYSIAM

How is CYSIAM helping law firms detect cyber-attacks and respond to them?  

We provide one of the few entirely UK-based, 24/7/365 Security Operations Centres (SOC) to deliver Managed Detection and Response (MDR) services. Our MDR services combine extensive cyber threat intelligence with expert security analysts, proactive threat hunters, and best-in-class technology platforms, providing a fully outsourced one-stop security partner.

Threat intelligence is at the very core of our MDR service and is what allows us to focus in on the specific tactics, techniques and procedures that are being employed to target our clients’ sectors. This insight allows us to then get proactive in identifying unique legal sector threats ahead of time and implementing the appropriate cyber resilience measures.

This service, underpinned by our expert consultancy and incident response teams, gives our clients the confidence to drive their business forward, knowing that CYSIAM has their backs.

How severe is the current cyber threat to the UK legal sector?  

We know that reputation is important to law firms; however, so do the attackers. We see an increase in extortion in the legal sector due to the economies of scale that an attacker can gain from compromising the sensitive client data or trust that is critical to law firms. The opportunity to exploit the legal sector has grown with the accelerated adoption of digital technologies in a historically paper-based sector. This, along with the increased sophistication of cyber criminals, means the threat to the UK legal sector is high.

Do you see a proportionate increase in exec-level awareness and cyber security budgets?

Yes, we see senior executives in law firms demanding more proactive strategies and not relying on an ‘it won’t happen to us’ approach. Regulations and standards are now also starting to be much more specific around what is expected of organisations, particularly those that handle very sensitive data. Too often though, it still takes a serious incident to initiate the required culture at a senior level.

How do you help firms understand their current cyber maturity and level of risk? 

CYSIAM has developed its own risk assessment framework based on industry standards which we use throughout our client engagements. This provides an efficient and well-rounded overview of the law firm’s current level of maturity and associated risk.

The seven key areas covered are:

(1) Governance

(2) Policy and procedure

(3) Technology

(4) Data handling

(5) Culture and education

(6) Physical environment

(7) Supply chain

The output of this risk assessment provides an ideal baseline for firms of all sizes on which to build an effective cyber security resilience programme.

We also have qualified consultants who can help with common industry standards such as NIST and ISO27001.

Where are you based and what type of clients do you work with? 

Our technical HQ is just outside Milton Keynes, we have a liaison office in London but we’re based throughout the UK and deliver consultancy projects globally. We are currently providing MDR services and cybersecurity consultancy to law firms, housing associations, technology companies, central government, local authorities, law enforcement, healthcare providers, private equity and top-tier consulting firms.

What makes CYSIAM different from the average provider? 

Our in-depth understanding of the cyber threat the world faces is unparalleled. Our team have decades of experience in delivering a step change in capability for our partners in the UK and overseas. We work with governments around the world to build national defences against state-level threats and in the last four years, have delivered sustainable impact in over 25 countries.

We understand the unique risks to the legal sector and can translate our experience from law enforcement, military intelligence and national security backgrounds to identify and mitigate the threats. We combine this with specialist expertise to deliver threat-led and proactive managed security services tailored to the UK’s legal sector, including 24/7/365 MDR services.

Our fantastic team are all vetted and our partnership-by-default approach makes us the ideal partner to help you succeed and prosper in the digital age.

Contact us at: info@cysiam.com

Join our free 60-minute Panel Discussion on 21st March 2023 at 12.00
when our panel of legal and cyber experts will explore the important tasks of preparing, planning, and practising your response to cyber-attacks.
Visit www.eventbrite.co.uk/e/523452529607 to sign up for the event.

MOVERS & SHAKERS

Hogan Lovells—Lisa Quelch

Hogan Lovells—Lisa Quelch

Partner hire strengthens global infrastructure and energy financing practice

Sherrards—Jan Kunstyr

Sherrards—Jan Kunstyr

Legal director bolsters international expertise in dispute resolution team

Muckle LLP—Stacey Brown

Muckle LLP—Stacey Brown

Corporate governance and company law specialist joins the team

NEWS

NOTICE UNDER THE TRUSTEE ACT 1925

HERBERT SMITH STAFF PENSION SCHEME (THE “SCHEME”)

NOTICE TO CREDITORS AND BENEFICIARIES UNDER SECTION 27 OF THE TRUSTEE ACT 1925
Law firm HFW is offering clients lawyers on call for dawn raids, sanctions issues and other regulatory emergencies
From gender-critical speech to notice periods and incapability dismissals, employment law continues to turn on fine distinctions. In his latest employment law brief for NLJ, Ian Smith of Norwich Law School reviews a cluster of recent decisions, led by Bailey v Stonewall, where the Court of Appeal clarified the limits of third-party liability under the Equality Act
Non-molestation orders are meant to be the frontline defence against domestic abuse, yet their enforcement often falls short. Writing in NLJ this week, Jeni Kavanagh, Jessica Mortimer and Oliver Kavanagh analyse why the criminalisation of breach has failed to deliver consistent protection
Assisted dying remains one of the most fraught fault lines in English law, where compassion and criminal liability sit uncomfortably close. Writing in NLJ this week, Julie Gowland and Barny Croft of Birketts examine how acts motivated by care—booking travel, completing paperwork, or offering emotional support—can still fall within the wide reach of the Suicide Act 1961
back-to-top-scroll