IT Governance urges law firms to adopt information security practices to avoid surge in ransomware attacks
The response comes after a dozen law firms have been held ransom in recent weeks by cyber criminals demanding tens of thousands of euros to not delete company computer systems and files – including private client information – as reported by RTÉ news.
Alan Calder, the founder and executive chairman of IT Governance, says: “Law firms have notoriously been targets for cyber criminals because of the sensitive information they possess such as financial data, mergers and acquisition intelligence, and other sensitive information. Like any other business, law firms often do not discover a data breach or ransomware attack until long after they’ve started. The scale and devastation of ransomware and cyber breaches means that law firms urgently need to adopt stronger cyber security safeguards.”
Furthermore, RTÉ News reports that most attacks on law firms go unreported because of their fear of losing their clients’ confidence and to avoid reputational damage.
“Many organisations within the legal sector have already achieved certification to the international information security standard, ISO 27001, as a means of proving their commitment to securing their clients’ data,” Calder continues. “Accredited certification to ISO 27001 proves to customers, stakeholders, insurers and staff that the organisation follows cyber security best practices.”
An ISO 27001 information security management system (ISMS) provides organisations with a risk-based approach to data security that can be applied across the firm and throughout the supply chain. The Standard encompasses people, processes and technology, and provides "a systematic approach for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an organisation's information security to achieve business objectives" (ISO/IEC 27000:2014).
To understand how your firm can achieve an internationally recognised level of cyber security with ISO 27001, download the free “ISO 27001 for Law Firms” green paper now >>
For more information on how IT Governance can help your organisation achieve compliance with the ISO 27001 standard, please visit our website, email servicecentre@itgovernance.co.uk or call +44 (0)845 070 1750.
- Ends -
NOTES TO EDITORS
IT Governance Ltd is the single-source provider of books, tools, training and consultancy for IT governance, risk management and compliance. It is a leading authority on data security and IT governance for business and the public sector. IT Governance is ‘non-geek’, approaching IT issues from a non-technology background and talking to management in its own language. Its customer base spans Europe, the Americas, the Middle East and Asia. More information is available at www.itgovernance.co.uk.
Mihaela Jucan
IT Governance
+441353771078
email us here
