Your PII insurer already prices this and your clients are about to start asking for it too.
Strategy, governance and incident response for fee-earner firms, structured as one programme.
Cyber has a price tag now
Successful cyber-attacks on UK law firms rose 77% in a single year. That’s no longer a statistic that lives solely in a risk register; it shows up at renewal, with a price tag. PII insurers increasingly price premiums against evidence of specific controls, not a policy document. And corporate clients, particularly the larger ones running their own procurement processes, are starting to make Cyber Essentials a condition of doing business, not a nice-to-have on a supplier questionnaire. For a fee-earner firm, that turns cyber posture into something closer to a trading term than a technical concern.
Three ways we can help
Strategy
Virtual CISO
Cyber budget and effort need prioritising against the areas of greatest business risk, and most mid-market firms don’t have a full-time CISO to do that prioritisation. Ekco’s Virtual CISO embeds with your internal team, developing a cyber strategy and risk methodology, with board-level reporting that translates technical posture into language a Managing Partner or board can actually use.
Governance
Cyber Essentials / CE+
Corporate clients and PII insurers increasingly expect firms to evidence a recognised baseline of controls, not just describe one. Cyber Essentials is the UK government’s own minimum standard; Cyber Essentials Plus adds the technical audit that proves the controls are actually in place. Ekco is an IASME-approved certification body and has delivered over 2,000 Cyber Essentials and CE+ certificates.
Resilience
Incident Response
An incident response plan that’s never been rehearsed isn’t assurance, it’s a hope. Ekco’s Cyber Incident Response service gives you a certified CIRT team on standby, tiered retainers with SLAs down to a 1-hour response at the Premium tier, and recovery support that goes beyond containment into rebuild.
Who this is for
Head of Risk and Compliance
who need evidence on demand, not a policy to describe.
CIO and CTO
balancing security against the risk of slowing fee earners down.
Evidenced, not just claimed
Ekco assists 42BR Barristers in achieving and maintaining their Cyber Essentials and Cyber Essentials Plus certification. This is a published, client-facing proof point, evidence a chambers can put in front of a corporate client or an insurer without having to explain it.
