Law Firms
Law Firm Email, Secured Before a Fake Wire Instruction Reaches It.
Client confidences and settlement money both travel by email. We run your Microsoft 365 tenant and the protection around the inbox, so a convincing message does not become a transfer.
For law firms that live in Outlook, Teams and SharePoint and want them administered by a security team.
Microsoft 365 and Email Security for Law Firms
How Does an Email Compromise Reach Trust Account Money?
An attacker who steals a lawyer's password reads the mail, learns who is closing what, and writes to the client or the title company from a look-alike address or the real one. The message says the wiring instructions changed. Lawyers hold funds in trust for clients and third parties, so the loss falls on people who trusted the firm.
Picture a closing on Friday afternoon with a last-minute email about a new account number. A written call-back rule, and a mailbox the attacker could not get into, are what stop it.
What Protects the Inbox?
Multi-factor authentication on every email account, so a stolen password alone does not open the mailbox. Email and web filtering that blocks known phishing and malware. Anti-spoofing settings, so others cannot easily send mail that looks like it came from your firm's domain.
Monitoring adds the rest: a suspicious sign-in or a new forwarding rule on a lawyer's mailbox raises an alert to people who act on it.
How Should We Send Sensitive Documents to Clients?
ABA Formal Opinion 477R says special security precautions may be needed when the client or the law requires them, or when the information needs a higher degree of security. Sharing a link with access controls and sign-in is often safer than an attachment that sits in a stranger's inbox for years.
Some clients will ask for specific measures in their outside counsel guidelines. We set up sharing, labels and access in Microsoft 365 to match what you agree to.
Who Gets Access to What Inside the Firm?
Every person gets an individual account, and nobody works day to day from an account with administrative privileges. Matter files in SharePoint or Teams can be limited to the people on the matter, which helps keep a client's file away from staff who do not need it. Conflicts and ethical walls are rules the firm sets with its counsel; we configure the access to follow them.
Does the Training Matter?
Yes. A trained assistant who calls the title company before changing a wire is the last control in the chain. We add phishing simulations and training for lawyers and staff, and a written procedure to verify any change of payment details.
What Is Included
6 PARTSTenant Administration
Users, licenses, mailboxes, Teams and SharePoint access, handled by your managed IT team.
MFA on Every Account
Multi-factor authentication on email and business applications.
Email and Web Filtering
Known phishing and malware blocked before it reaches an inbox or a browser.
Email Authentication
Anti-spoofing settings for your domain, so your firm's name is harder to forge.
Least Privilege
Individual accounts for everyone, and no daily work from administrator accounts.
Payment Change Procedure
A written process for verifying wiring and bank detail changes.
Frequently Asked Questions
4 QUESTIONSWe already pay for Microsoft 365. Is it not secure out of the box?
Microsoft provides the tools. Many protections that matter, such as multi-factor authentication, sign-in rules and anti-spoofing settings, still have to be turned on, configured and watched. That is the work we do.
Can you help prevent wire fraud on settlement funds?
Yes. Multi-factor authentication, filtering, anti-spoofing, monitoring, staff training and a written call-back procedure for payment changes are the parts of the program that address it.
Do you encrypt email to clients?
We set up secure sharing and the protections Microsoft 365 offers, to match what your clients and your counsel say the firm needs. Ask us on the call what a specific client requires.
Do you give legal advice about our ethics duties?
No. We are not a law firm. We run the technical safeguards, and the firm and its bar decide whether they meet the firm's duties.
More for Law Firms
Managed IT and Help Desk
Unlimited remote support, monitoring and maintenance at a fixed monthly cost.
Managed Security Monitoring (MDR and SOC)
Round the clock monitoring, detection and response from a security operations center.
Backup and Ransomware Recovery
Encrypted, off-site backups that are tested, and a plan to restore the business after an attack.
Virtual CISO (vCISO)
Senior security leadership, a roadmap and governance, without a full-time hire.
Law Firms
Managed IT and security for small and mid-sized law firms and solo practitioners who hold client confidences and trust funds.
Talk Through Your Firm's Email.
Pick a time. Tell us how your lawyers use email and how you move money for clients.
Looking for CMMC? Our Compliance Division, Capital Cyber Compliance, delivers it.
Under 25 people? Apply for an in-kind cybersecurity grant from Cyber Grants Alliance, a nonprofit. No cost to you.