Law Firms
Someone Watching Your Firm's Systems at 3 a.m., and Acting on What They See.
Law firms are targets because of what they hold. Our monitoring watches your endpoints, accounts, cloud and network around the clock, and responds when something is wrong.
For law firms that hold privileged files and client funds and have no security team of their own.
Managed Security Monitoring (MDR and SOC) for Law Firms
Why Would Anyone Attack a Small Law Firm?
Because of what is inside. A small firm can hold merger plans, medical records, divorce files, trade secrets and settlement money, with less protection than the clients it represents. ABA Formal Opinion 483 itself describes law firms as inviting targets because they are custodians of highly sensitive information.
What Does the SOC Watch For?
Sign-ins from places your lawyers are not, mailbox rules that forward mail outside the firm, large file downloads from document management, malware on a laptop and an unusual process on a server. Analysts investigate what looks wrong and act: isolating a device, disabling an account, stopping a process.
We deploy a managed SIEM and MDR service that watches logs across your cloud, network and endpoints 24/7.
What Happens When There Is an Incident?
You hear from us, and the response has already started. Your incident response plan is written ahead of time, so everyone knows who decides what. ABA Formal Opinion 483 says that a breach involving material client information carries duties to notify clients and take other reasonable steps. What that means for your firm is for the firm and its counsel to decide; our job is to find out what happened, contain it and give you the facts.
What About Client Audits and Insurers?
Corporate clients and cyber insurers ask whether logs are collected and who looks at them. Monitoring reports show what we saw and what we did, in plain language, and they are the evidence behind your answers on a questionnaire.
Is Monitoring Enough on Its Own?
No, and we do not sell it that way. Monitoring works best on top of multi-factor authentication, endpoint protection, patching, backups and trained staff. Managed security is the program that keeps all of those in place.
What Is Included
6 PARTS24/7 SOC Monitoring
Logs and alerts from cloud, network and endpoints watched around the clock.
Managed Detection and Response
Analysts who investigate and act, not just forward an alert.
Incident Response
A formal plan, and a team that runs it with you.
Threat Detection on Accounts
Suspicious sign-ins and mailbox rules flagged and acted on.
Reporting
What we saw and what we did, in plain language.
Ransomware and Phishing Defense
Detection tuned to the attacks small businesses see most.
How Managed Security Monitoring (MDR and SOC) Works for Every Client
Frequently Asked Questions
4 QUESTIONSIs the monitoring really around the clock?
Yes. The SOC monitoring is 24/7, including nights, weekends and holidays.
What is the difference between MDR and antivirus for a law firm?
Antivirus blocks known bad files on one device. MDR watches behavior across all your devices, accounts and cloud services, and people respond to what it finds.
Will you tell us about every alert?
No. You hear about what matters. Most alerts are investigated and closed by our team; you get a report of what we saw and are called when a decision is yours.
Does monitoring satisfy our ethics obligations?
We cannot say. We are not a law firm. Monitoring is one safeguard among several, and whether the firm's efforts are reasonable under its bar's rules is for the firm and its bar to confirm.
More for Law Firms
Managed IT and Help Desk
Unlimited remote support, monitoring and maintenance at a fixed monthly cost.
Microsoft 365 and Email Security
Microsoft 365 set up, secured and run, with email protection against phishing and spoofing.
Backup and Ransomware Recovery
Encrypted, off-site backups that are tested, and a plan to restore the business after an attack.
Virtual CISO (vCISO)
Senior security leadership, a roadmap and governance, without a full-time hire.
Law Firms
Managed IT and security for small and mid-sized law firms and solo practitioners who hold client confidences and trust funds.
Talk Through Your Firm's Security.
Pick a time. Tell us what you protect and who asks you about it.
Looking for CMMC? Our Compliance Division, Capital Cyber Compliance, delivers it.
Under 25 people? Apply for an in-kind cybersecurity grant from Cyber Grants Alliance, a nonprofit. No cost to you.