Law firms and chambers work in unison to enhance cyber security

In response to feedback from users, the new version includes considerations on disaster recovery, business continuity and incident management, as well as data and device management.

Protection against phishing, identifying vulnerabilities and penetration testing are also emphasised in response to ongoing cyber security developments.

The Law Society is the independent professional body that works globally to support and represent solicitors, promoting the highest professional standards, the public interest and the rule of law.

The Bar Council represents nearly 18,000 practising barristers in England and Wales. It promotes the Bar’s high-quality specialist advocacy and advisory services, fair access to justice for all, the highest standards of ethics, equality and diversity across the profession and the development of business opportunities for barristers at home and abroad.

Reassurance for clients

Nick Emmerson, president of The Law Society of England and Wales, said: “Law firms and chambers are targets for the ever-growing threats posed by today’s cyber criminals. We know that no single tool can offer complete protection against cyber threats, but this updated questionnaire will help to reassure clients that data is kept as secure as possible. Firms will need to continue to take other precautions, but the development of the questionnaire is an important step in the right direction.”

Sam Townend KC, chair of The Bar Council, noted: “Keeping client information safe is of paramount concern to barristers and chambers. Since it was launched two years ago, the cyber security questionnaire has provided a useful tool to help protect against the threat of cyber attacks in a proportionate way. Through joint work with The Law Society, we are making sure that this tool keeps pace with developments in cyber security and responds to the feedback from our members.”

A new voluntary cyber and information security affirmation has been published alongside the questionnaire to be used by barristers and instructing solicitors to set out their specific and individual roles and responsibilities in relation to data handling and processing.

The voluntary affirmation is not contractually or legally binding, but provides a useful and timely reminder of the importance of cyber security and information management for the legal profession in general.