Regional law firms, 30–150 people
Law firms
Regional firms in private client, employment, disputes and family work hold client money and client secrets. We run your IT so that both stay safe, and so you can show it to the SRA, your insurer and your clients.
Software we keep running
- Microsoft 365
- Entra ID
- Intune
- SharePoint
- Teams
What’s at stake
The SRA expects systems that hold.
Fraud aimed at client money
Criminals take over email threads to divert payments. Three-quarters of the cyber reports firms made to the SRA in 2024 involved residential conveyancing.
Cyber Essentials is becoming the ticket
It became mandatory for Legal Aid Agency criminal contract holders on 1 October 2025, and clients and insurers ask about it more each year.
Enforcement targets the basics
The ICO has fined UK law firms over missing multi-factor sign-in, unpatched systems and breaches reported too late.
What we put in place
Protection you can show.
- Ready for Cyber Essentials PlusDevices, accounts, firewalls and patching brought up to the Cyber Essentials controls, so the independent technical audit finds what it’s looking for.
- Microsoft 365, hardened against fraudMulti-factor sign-in, email authentication (SPF, DKIM and DMARC), alerts on new forwarding rules, and help setting up a call-back routine for changed bank details.
- Rules for AI and CopilotPermissions tidied up before Copilot is switched on, and written rules for which AI tools may see client data.
- Confidentiality, signedA written confidentiality agreement covering everyone at 2nd wind and at our subcontractors who can see client data.
- Backups and an incident planDated restore tests, and an incident plan walked through with your leadership, including who reports what to whom, and when.
- Your practice software, in good handsCloud practice and document management systems still depend on devices, identity and email around them. We run that part, and work with your software vendor on the rest.
Proof
What we can show today.
- Security practices aligned with ISO/IEC 27001.
- We’ve run IT for law firms and fund managers for years, alongside our engineering and architecture clients.
Start
Where does your firm stand?
In a first call we go through what the SRA, your insurer and your clients will ask of your IT, and how we’d meet it. The regulatory assessment stays with you.
- No first level
- No surprises
- Pilot before you buy