Security for firms that hold client data.

Regulatory context

Your clients are asking. Your answer should be documented.

Professional services firms sit on privileged, financial, and personal data for every client they serve, and clients know it. Outside counsel guidelines, vendor risk programs, and cyber insurance applications all expect a documented security program, MFA, email protection, tested backups, and periodic testing.

The most common incident we see in this sector is business email compromise: an impersonated partner, a redirected payment, a compromised mailbox. Our managed program is built around preventing it.

• Email and identity security against impersonation and payment fraud
• Microsoft 365 security audits and remediation
• Documented programs for client due diligence and insurance
• Penetration testing and the evidence to share with clients

Client requirements

Outside counsel guidelines and vendor security questionnaires.

Cyber insurance

Application controls: MFA, EDR, backups, email security.

State privacy laws

Personal data obligations.

SOC 2

For firms serving enterprise clients.