Recognising and Mitigating Today’s Cyber Threats to Law Firms

We look at the headline issues highlighted by the National Cyber Security Centre’s report examining the cyber threats to the UK legal sector, and how law firms ought to approach, and respond to them.

No law firm is immune from cyber criminals, whatever the level of resources they throw at managing and minimising the risks. A new report from the National Cyber Security Centre (NCSC) has laid bare the threats to today’s law firms, but perhaps more importantly, highlights how firms can protect themselves.

The Law Society and the SRA were involved in the compilation of the report which highlights the most significant cyber security threats to law firms.

As law firms continues to adopt the latest information technology, it’s no surprise that there is a correlating rise in cyber threats. The NCSC report aims to help law firms in their understanding of the existing cyber security threats and the extent to which the legal sector is being targeted.

Reported incidents are on the rise, with 60% of law firms reporting an information security incident in the last year (according to PricewaterhouseCoopers). The SRA reports that more than £11 million of client money was stolen because of cybercrime in 2016-17. And it’s not just the financial cost to firms: the reputational damage can take a long time to recover from.

What are the main risks?
The primary threat to the UK legal sector, says the Report, stems from cyber criminals with a financial motive, but there has also been a rise in nation state actors and so-called hacktivists targeting foreign law firms. Four particularly significant threats firms are highlighted:

  • Phishing – particularly common in conveyancing. The SRA details 110 scams against law firms by mid-2018
  • Data breaches – these tend to be more targeted, and law firms with politically or commercially sensitive clients are likely to be at a higher risk of data breach than a local high street firm
  • Ransomware - which causes massive business disruption (as DLA Piper found in 2017 when it was hit by a variant of the Peta malware)
  • Supply chain compromise – the greatest issue, according to the Report, being a third-party supplier failing to adequately secure the systems holding your sensitive data

The NCS is keen to encourage firms to adopt “cyber security best practice”, and firms will really benefit from taking note of the practical guidance in the Report on how they can protect their practice. This includes:

  • How to report a cyber attack and to whom
  • How to mitigate against phishing attacks, data breaches, malware and threats to law firms in a supply chain
  • Small business guide actions
  • Cyber security information sharing: UK-based law firms are now able to sign up to a new, private CiSP group tailored to their needs
  • The Cyber Essentials government scheme: this if for all firms - from sole practitioners to international corporate firms. The scheme will help you avoid the consequences of malware, ransomware and phishing attacks, and sets out 5 easy to implement controls

An underlying problem highlighted by the report is that many firms consider cyber security as an IT issue “rather than the strategic risk management issue it actually is”. By taking the right approach, implementing the tools for best practice highlighted in the Report, firms can proactively mitigate the on-going cyber risks to their systems and processes and protect their firm from criminals.

The full report can be downloaded here

 

 

Back to the SOLICITORS group News

Media Centre

“The Solicitors Group online directory is an established and respected channel for legal professionals, meaning I can talk to my existing and future customers about products and services both quickly and easily.”

Carole Hatton
Marketing Manager
Landmark Information Group

“Reaching our niche market can sometimes be challenging, however we find promoting our legal training courses on www.thesolicitorsgroup.co.uk an excellent way of contacting both existing and new customers. The service we receive from The Solicitors Group is both professional and relevant to our core activities and we would recommend their services to others.”

Euromoney

“I must say that to date we have been very pleased with the referrals we are getting from your site.”

Paul West
Orchid Cellmark

“The Newsdesk feature on www.thesolicitorsgroup.co.uk is ideal for us. Its prominent location on the site provides a great platform to communicate key messages to existing and potential clients.”

Neil Phillips
Marketing Manager
Countrywide Legal Indemnities

"We are very happy with the referrals we are getting from The Solicitors Group web-site."

C.A. Bishop
Technical Director
Wickham Laboratories Ltd

“We received 419 click-throughs to our site from advertising with www.thesolicitorsgroup.co.uk”

Legal Prospects

“Putting myself in my potential client's shoes, I consider www.thesolicitorsgroup.co.uk to offer perhaps the clearest and most user-friendly listing of expert witnesses, especially in its choice of index terms.”

Ivan Vince
ASK Consultants

“The banner ad looks great”

Samantha Dawson
Director
The Bundle Business Limited

“The Solicitors Group has been fantastic in helping us to raise awareness about bowel cancer, which kills 16,000 people every year in the UK. Bowel Cancer UK aims to save lives by raising awareness of bowel cancer, campaigning for best treatment and care and providing practical support and advice. Without the support of organisations such as the Solicitors Group we would be unable to carry out this vital work. We are very grateful to the team at the Solicitors Group for their support and assistance.”

Tamara Matthews
Legacy Officer
Bowel Cancer UK

“As a result of Law London, we have registered 208 new companies/firms to the website, generating £20,797 GWP to date, as well as reinforcing our presence in this very profitable marketplace.”

Aviva

“The event was well put together and executed, and the traffic of potential customers for us was high. We had a number of enquiries regarding our services after the event and we feel our attendance there was important to our overall brand exposure. We feel a Law event of this size without Euromoney Legal Training present could potentially be hurtful to us as a business. We would recommend you to attend and shall ourselves be there again in 2008.”

Euromoney

“Many thanks for the prompt service.”

Martin Gibbs MBE
Director / Investigator
Griffin Forensics Ltd

“A targeted email to key customers is an invaluable method of communication, endorse this with the Solicitors Group branding, relevant editorial content and you have created a winning combination! We look forward to reading the next edition.”

Carole Hatton
Marketing Manager
Landmark Information Group

“Talking directly to Property Lawyers is critical to us as they are key customers or potentially could be for all of our products, The Solicitors Group offer a perfect solution to get our messages right to the right people”

Carole Hatton
Marketing Manager
Landmark Information Group

“Thank you for having a useful and informative site, it is good to see a comprehensive and friendly portal.”

Stefan Fann
UK Probate Services

“Cadogans aims to keep its brand image in front of lawyers who may be looking for engineering experts. A check on Google analytics showed that referrals to our website from The Solicitors Group website were above average.”

Daphne Wassermann
Technical Director
Cadogans