Endpoint and email protection
Antivirus, filtering and phishing defences kept current across every device, with the gaps that appear when someone buys a laptop themselves closed as a matter of routine.
Security you can evidence.
Audits rarely go badly because the IT is wrong. They go badly because nobody can show quickly that it is right. We handle the protection and the paperwork that proves it.
Quarterly rolling contractWalk away after three months
Protection is only half of it.
For a regulated firm, security is not only about whether an attack succeeds. It is about whether you can demonstrate, on request, that access is controlled, that backups are tested, that logs are retained and that your policies match what actually happens.
Four things cause most of the friction in an audit: evidence is scattered, permissions have never been validated, log retention is unclear, and the policy document describes a firm that no longer exists. All four are fixable in advance.
What this involves.
Access control that holds up
Starters, movers and leavers handled properly, permissions reviewed rather than assumed, and multi-factor authentication where it matters.
Backup and recovery testing
A backup nobody has restored is a hope, not a control. We test recovery and keep the records that show it was tested.
Audit evidence, kept current
The supplier register, the retention position and the access records gathered in one place, so a questionnaire takes an afternoon instead of a fortnight.
Worth knowing.
SRA and Lexcel
Law firms are asked specific questions about data handling and continuity. We answer them with evidence rather than assurances.
GDPR
Data processing records, retention periods and the supplier chain, documented and kept up to date as things change.
Cyber Essentials
The controls the scheme asks for, implemented and evidenced. Certification status to be confirmed with the client team.
Questions we get asked.
Do you handle compliance questionnaires from our clients?
Yes. Larger clients increasingly send security questionnaires to their professional advisers. We keep the underlying evidence current so answering one is routine.
What happens if we are breached?
Containment and recovery first, then an honest account of what happened and what changes. Your account partner runs it, so you are dealing with someone who knows your environment.
Is security included in managed IT?
The core of it is — patching, access control, backup testing and monitoring. Specific certification work is scoped separately because the effort depends on where you are starting from.
Also part of IT Support.
Co-managed ITYour IT manager keeps the relationships and the context.IT Strategy & vCTOSome firms get technology oversight from a full-time CTO.Cloud & Microsoft 365Most firms are already on Microsoft 365.Backup & Disaster RecoveryEvery firm has a backup.IT Projects & office movesMoving premises, opening a second office or replacing ageing kit.
One accountable partner for all of it.
Thirty minutes with a senior engineer, then a written one-page summary you keep whether or not you work with us.
- Twenty to thirty minutesWith a senior engineer, on a video call.
- A written summary you keepOne page, yours whether or not we ever work together.
- No obligationNothing to sign at the end, and no pressure to.