Standard cyber-security form to aid solicitors instructing barristers


Cyber security: Encouraging a culture of change

A standardised form for solicitors to assess the cyber-security arrangements of chambers they instruct has been launched by the Law Society and Bar Council.

Introducing it at the Law Society’s risk and compliance conference on Friday, Andrew McWhir – the society’s technology policy adviser – said the aim was to “promote a culture of change” and for both law firms and chambers, and chambers and their individual barristers, to have “earlier and more intelligent conversations” about security.

It should also reduce the administrative burden for both law firms and chambers. The National Cyber Security Centre was among those consulted on the questionnaire’s contents.

It does not cover barristers’ individually owned and managed devices, or IT services they procure directly.

After ascertaining what central IT systems a chambers provides for its barristers, the questionnaire features 25 ‘yes/no/don’t know’ questions on risk management, engagement and training, asset management, architecture and configuration, vulnerability management, identity and access management, data security, logging and monitoring, incident management, and supplier security.

The joint Law Society and Bar Council working group that drafted the document said it had been “mindful of problems associated with inappropriate and/or irrelevant questions being asked of barristers’ chambers”.

For that reason, it recommended avoiding supplementary questions where possible, or at least separating them from the primary questionnaire.

The working party recommended that chambers review their answers every six months.

At the conference, Bar Council policy and programmes manager Stuart McMillan said there had been a debate about whether to make training compulsory, but as the goal was a culture change, “we came down on the side of ‘encourage’”.

Law firms could still mandate training as part of their contractual arrangements with chambers.

Law Society president I Stephanie Boyce added: “We know that no one tool can offer complete protection against cyber threats, so firms will need to continue to take other precautions, but the development of the questionnaire is an important step in the right direction.”

Mark Fenhalls QC, chair of the Bar Council, said: “This valuable new tool will help reassure clients that data is kept as secure as possible.

“The joint work of the Law Society and the Bar Council will make it easier for solicitors and barristers to defend themselves against cyber attacks.”

The questionnaire can be found here and here.




Leave a Comment

By clicking Submit you consent to Legal Futures storing your personal data and confirm you have read our Privacy Policy and section 5 of our Terms & Conditions which deals with user-generated content. All comments will be moderated before posting.

Required fields are marked *
Email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Blog


GEO – the impact of AI on digital marketing for law firms

GEO represents the biggest change in online business generation that I can remember. You cannot afford to stick with the same old engine optimisation techniques.


What the law can learn from fintech’s onboarding revolution

Client onboarding has always been slow. It’s not just about the paperwork and manual workflows; it’s also about those long AML checks and verifications.


Civil enforcement – progress at last with CJC report

‘When do I get my money?’ is a question that litigators acting for successful parties are used to fielding. The value of judgments is of course in the recovery made.


Loading animation