01 / 03
Client confidentiality on the line
Firms hold sensitive matters, deals and personal data. A breach can mean reporting to your regulator and the ICO, and difficult conversations with clients.
Protect client confidentiality and keep fee earners working
For law firms, accountancy practices, consultancies and other professional firms of 50 to 5,000 people. Clear findings for CISOs, security teams, finance and the board, and independent specialists for SRA expectations, Lexcel, Cyber Essentials, ISO 27001 and payment fraud controls.
Business Cyber Check introduces you to authorised insurers and brokers. We are not an insurer or broker and do not provide quotes or advice. Your enquiry may be shared with up to 3 of them.
What keeps professional services leaders up at night
02 / 03
Payment diversion and email fraud
Criminals impersonate firms, clients and suppliers to redirect payments. Email security, verification steps and staff training are your first line of defence.
03 / 03
Client and panel questionnaires
Clients, panels and public buyers often ask for Cyber Essentials, ISO 27001 or detailed security answers before they instruct, appoint or renew.
How we help
01 / 03
Vetted security providers
Specialists who can close gaps, prepare you for assessments and run incident response.
02 / 03
Authorised insurers and brokers
Explore cyber cover with authorised specialists. We don't give quotes or advice ourselves.
03 / 03
Breach lawyers
Legal support on reporting duties, notices and regulators after an incident.
Standards and frameworks we can help you work towards
We don't certify, accredit or assess. We connect you with independent specialists who can help you work towards these.
01 / 06
SRA expectations for law firms
Help with the systems, controls and confidentiality the SRA Code of Conduct for Firms expects, and with reporting cyber incidents that affect clients.
02 / 06
Law Society Lexcel
Help with the information management and risk management areas, if you hold or are working towards Lexcel.
03 / 06
Cyber Essentials and Cyber Essentials Plus
Help getting ready for assessment by a certification body, including for public sector contracts that require it.
04 / 06
ISO 27001
Help scoping and preparing an information security management system.
05 / 06
UK GDPR and client data
Help with data mapping, DPIAs and breach-response planning, with legal specialists where needed.
06 / 06
Payment diversion and email fraud
Help with email security, payment verification and staff training, so fake bank details are harder to slip through.
How it works
- 01
Book a 20-minute briefing
Tell us about your setup, deadlines and main concerns.
- 02
Get a clear picture
Understand what to prioritise for your security team, board, auditors and insurers.
- 03
Meet the right specialists
We introduce security providers, authorised insurers or brokers, or breach lawyers. You decide whether to go ahead.
Questions
Do law firms have to report cyber attacks to the SRA?
Yes, if clients are or could be affected. The SRA expects prompt reports of attacks with an actual or potential impact on clients, such as lost client data or funds, or transactions that can't complete. It encourages reports of significant attempts too, but not routine ones. Personal data breaches may also need reporting to the ICO.
Does our professional indemnity insurance cover cyber attacks?
It depends on your policy wording, which varies between insurers, so check with your broker or insurer. If you want to explore standalone cyber cover, we can introduce you to up to 3 authorised insurers or brokers. We are not an insurer or broker, and we don't quote or give advice.
What does the briefing cost?
Nothing. The 20-minute briefing is free and there is no obligation to go ahead with anyone we introduce. We are paid by the specialists, insurers or brokers we introduce, not by you, and we only share your details with those you agree to hear from.
Do we need Cyber Essentials to win public sector work?
For some contracts, yes. Central government departments, their agencies and NHS bodies apply a Cyber Essentials requirement to contracts with certain characteristics, such as handling personal information, under Procurement Policy Note 014. Other buyers set their own rules, so check the tender documents. Specialists we introduce can help you prepare for assessment by a certification body.
How do we protect the firm against payment diversion fraud?
Use layered controls rather than relying on one. Verify any change of bank details by calling a number you already hold, protect email with multi-factor authentication and strong filtering, and tell clients how you will and won't contact them about payments. Specialists we introduce can test your controls and train your teams.
Professional services
Talk it through in 20 minutes
A free, no-obligation briefing with clear next steps.