Call us now:
So LockBit has taken a shine to the UK legal profession? With the Allen and Overy hack and reports on the 24th November that an MSP to the legal profession has suffered a cyber attack. An attack affecting a reported 80 law firms, halting property exchanges and potentially 1,000s of home moves. The follow on impact on the conveyancing industry will be one to watch. As it only takes one of the effected firms to be in a chain for the whole chain to be affected. Then there’s the breach of contract implications.
The UK government had an opportunity to focus on cyber law in the recent Kings Speech. Echoing the regulation implemented by the EU under NIS 2. NIS 2 sets out requirements for MSP providers to implement cybersecurity risk management, educate boards, oversight, assure and attest cyber compliance.
The challenge law firms face is that it is well documented that their cybersecurity maturity is poor, that include supply chain risk management. One could question supply chain and concentration risks, the adoption of the shared responsibility model, the audit of an MSPs cybersecurity risk management and don’t get me started on patch management. But one will wait and see what happens next.
Any lawyers wanting to know more about cybersecurity regulation, please feel free to come and watch Rachel V. Rose, JD, MBA and I discuss cyber regulatory compliance with the Federal Bar Association on the 18th December.
Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7133911223300960257