Menu
No data was found
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Systems that hold up to the SRA, your insurer, and the people trying to intercept your completion monies.
Law firms are among the most targeted businesses in the country, and for a specific reason: you hold client money, you move it on known dates, and your clients act on your emails without question. Add privileged material, a regulator, and a PI renewal that now asks detailed questions about your security, and IT stops being a back office matter. This page is about the risks particular to legal practice and, just as importantly, about being able to evidence what you’ve done about them.
The fraud is aimed squarely at you. The pattern is well documented and it still works. A mailbox is compromised, someone watches a conveyancing matter quietly, and on the day of completion the client receives revised account details from an address they recognise. The money goes. What follows is a dispute about who bears the loss, a report to the SRA, a claim on your PI policy, and a client who has lost their deposit. Firms lose six figure sums to an attack that required no technical sophistication at all.
Proving it matters as much as doing it. Your cyber and PI insurers now ask precise questions at renewal: is multi-factor authentication enforced, are backups tested, how are devices managed. An inaccurate answer can affect whether a claim is paid. Lexcel and CQS ask their own questions about information management. Answering all of them accurately requires someone to actually know the state of your systems.
Access isn’t just hygiene, it’s professional obligation. Conflicts, confidentiality between matters, and information barriers where you need them. In a firm, who can open which file is a regulatory question, not just an IT preference.
In law it isn’t enough to have systems in place. You have to be able to prove they’re robust, on someone else’s timetable.
The legal sector attracts scrutiny from every direction: the SRA, your insurers, lender panels, and clients who increasingly ask how their data is handled before instructing. If you can’t demonstrate that you took sensible, documented steps, the consequences reach beyond the incident itself. A cyber policy that doesn’t pay out because an answer at renewal was optimistic is a worse outcome than not having one.
And the underlying causes are usually mundane. A mailbox without multi-factor authentication. A fee earner’s laptop that isn’t encrypted. A backup nobody has tested. An account belonging to someone who left in March.
The technical work that prevents completion fraud is the same technical work that answers your insurer, satisfies Lexcel and CQS, and reassures a client asking about data handling. Enforced multi-factor authentication, email security that spots impersonation, managed and encrypted devices, controlled access to matters, tested backups, and a record of all of it. Done once and maintained, it serves every one of those audiences.
Advanced email security aimed at account takeover and impersonation, domain protection that makes your address harder to spoof, and monitoring for compromised mailboxes. Plus practical help with how your firm communicates bank details to clients, because the process matters as much as the technology.
Permissions that reflect your firm’s structure, information barriers where they’re needed, secure file sharing instead of email attachments, and an audit trail of who accessed what.
We document the technical controls as we put them in, so when PI renewal, a Lexcel assessment or a client’s due diligence questionnaire arrives, the answers exist and are accurate.
Two minutes, a handful of questions, covering the ground your insurer asks about at renewal. Worth running before you fill the form in rather than after.
We recommend Professional for legal practices because of what you’re exposed to and what you’re asked to prove. You handle client money, you hold privileged material, you’re regulated, and your insurers want evidence rather than assurances. Professional gives you the strongest security stack we offer plus Cyber Essentials tools and certification support, and Cyber Essentials answers a good portion of what insurers, lender panels and client questionnaires ask about.
For a small firm with straightforward systems, Essential covers complete cloud and email security, real Microsoft 365 backup, device security and your Microsoft 365 Business Premium licence. If you do conveyancing, we’d steer you to Professional regardless of size, because the email security and the certification both matter more in that work.
The starting point either way is a look at your mailboxes, your devices, your access permissions and your backups, and an honest view of how your firm would answer its next renewal questionnaire.
The Professional IT Support Service is for businesses that want the best — complete IT support, the strongest security we offer, and Cyber Essentials tools and certification support all in one package. If you need to protect your reputation, meet compliance requirements, and have confidence your IT is in safe hands, this is it.
Key Features
Every package is unlimited support with no ticket caps and no per-incident charges. Rolling monthly terms are available, longer terms carry a discount, and not-for-profit pricing applies across the range.
Partners are the most targeted and the most likely to want an exemption. Almost every compromised firm has an exemption in its history.
Ordinary spam filtering catches bulk nuisance. It does not catch a well written message from a near identical domain about a completion you were expecting.
Told to them at the outset, in writing, including the fact that you will never change account details by email. Cheap, effective, and something we can help you word.
Fee earners work from home, from court and from trains. A lost unencrypted laptop with matter files on it is a reportable incident.
Not everyone needs every matter. Where an information barrier is required, it should be technically enforced rather than a convention.
Legal files live for a long time. Knowing where they are, and that they can be recovered, is worth an afternoon.
This is the part that stops most people, and it’s usually smaller than imagined.
Mailboxes, devices, case management system, permissions, backups, and how documents currently reach clients. About an hour, no obligation, and you keep the findings.
Multi-factor authentication, email security and device protection, because that’s where completion fraud starts.
Nothing significant changes in the middle of a busy completions week. Migration and upgrade work is planned for your quieter periods.
Unlimited support, monitoring and patching, with the technical evidence for insurers and accreditation maintained as we go rather than assembled the week before renewal.
Questions law firms ask us
We support everything it runs on: the hosting or server, the network, the devices, the access and the backups. We work alongside your provider’s own support rather than replacing it, so you aren’t the one refereeing between two suppliers when something isn’t working.
Largely, yes, and it’s the work we’d prioritise. It’s a combination of protecting mailboxes so they can’t be read, email security that spots lookalike domains, configuration that makes your address harder to spoof, and a clear process with clients about how bank details are and are not communicated. No single one of those is sufficient on its own.
Yes, and this is one of the more valuable things we do for firms. We’ll tell you what’s actually true today, fix what needs fixing, and give you accurate answers. An optimistic answer on a renewal form is a serious problem if you ever need to claim.
The information management and security elements are ones we can evidence directly. The practice management and file handling side stays with you, and we won’t pretend otherwise.
Not as email attachments, which is still how most firms do it. There are straightforward options that clients find easy, and getting this right removes a common route for both interception and accidental disclosure.
Yes. Permissions can reflect your structure, and where you need a genuine information barrier it can be enforced technically rather than relied on as a convention. Worth setting up properly once.
It’s manageable. Encrypted, managed devices, the same access rules wherever someone is working, and support that doesn’t depend on being in the office.
We don’t work to fixed SLA response times, and that’s deliberate. A service level agreement treats every ticket as a clock: a suspected mailbox compromise on a completion day and a slow printer both get whatever response somebody wrote into a contract. We work on priority instead, so the serious thing is dealt with as the serious thing.
No. You can take any package on a rolling monthly term. Longer terms carry a discount, 5% at 12 months, 10% at 24 and 20% at 36 on IT support, but that’s your choice, not a condition.
We look after law firms and other regulated professional services businesses across Bristol, Bath, Cheltenham, Gloucester, Somerset and Swindon, with remote support anywhere in the UK. We’re an NCSC Assured Service Provider, Cyber Essentials Plus certified, and ISO 9001 and ISO 27001 accredited, so the evidence standards we ask you to meet are ones we’re audited against ourselves.
Start with an hour and an honest picture of how your firm would answer its next insurance questionnaire. No obligation, and if the answer is that you’re in good shape, we’ll say so.
We have worked with WDYIT for just over 12 months now. At inception, they reviewed our set-up and equipment, and provided advice in respect of our vulnerabilities and cyber-security. Moving forward they have provided our staff with daily support from maintaining software to printer issues. They are responsive and understand the commercial pressures we often experience, especially when IT fails. The team are always pleasant and understanding. Our experience to date has been very positive. We would not hesitate to recommend them.