Professional services
Protect client trust, and the money that moves through your firm.
Managed cybersecurity and IT for firms that hold confidential client information and move client money, with 24/7 remote security monitoring and management and answers ready for the next questionnaire.
For law firms, accounting and tax practices, financial advisors, and consulting firms.
What we see
Where professional firms get caught out
Attackers go where the money and the confidential files are. For most firms, the way in is an email.
Payment and wire fraud
A convincing email changes payment instructions, and the money is gone before anyone calls to check.
Email that pretends to be you
Without the right public email settings, anyone can send messages that look like they came from your firm.
Questionnaires and insurance applications
Clients and insurers want to know about multi-factor authentication, backups, training, and your incident plan.
Rules that expect a written plan
Tax preparers and many accounting practices fall under the FTC Safeguards Rule, which requires a written information security program. Lawyers are expected to make reasonable efforts to protect client information.
How we help
Protection built around client money and client files
Most of this is in every managed plan. Where something depends on the plan, we say so.
- Payment request checks. A call-back process that helps your team verify suspicious payment requests, set up and trained.
- Email protection. Email security and DMARC, so it is much harder to send email pretending to be your firm.
- 24/7 security monitoring and management. Threats are blocked automatically, day and night.
- Sign-in protection and a company password manager. A stolen password alone is not enough to sign in.
- Helps keep sensitive information from leaving by email. Data loss prevention for qualifying legal businesses, in Managed and Complete.
- A written security program. Policies and a written information security plan, through our compliance readiness work.
- Help with questionnaires. A person to call before you answer a client questionnaire or an insurance application.
- A quarterly review as evidence. Data from your own systems, ready for insurers and clients who ask.
In practice
A fraudulent payment, caught before it cost anything
For one of our managed security clients, a regional nonprofit, a fraudulent bot payment attempt through their accounting software was caught and contained with zero impact to their bank account. Separately, in a single quarter, 1,261 suspicious emails were flagged before anyone had to wonder about them.
From a nonprofit client, anonymized pending permission.
Read the full storyWhere to start
Most firms start here
Before we talk
Straight answers.
Related reading:
Can you help us answer a client’s security questionnaire?
Yes. Ongoing advisory gives you a person to call before you answer one, and the quarterly review from a managed plan gives you evidence to point to.
We prepare taxes. Do we need a written information security plan?
Very likely. Tax preparers are covered by the FTC Safeguards Rule, which requires a written information security program, and IRS Publication 4557 explains what it should cover. We can help you write it and keep it current. This is general information, not legal advice.
Do you support our practice management or tax software?
We do not support software we do not provide or license. When something goes wrong with it, we triage the problem and hand it to the vendor, and we secure the accounts and computers your team uses to reach it.
Do you work with firms outside El Paso?
Yes. Every plan is available nationwide and delivered remotely. On-site support is included in Managed and Complete in the El Paso region, including Las Cruces; elsewhere, on-site work is quoted separately.
What happens if something goes wrong after hours?
Monitoring and management keep running, and threats are still blocked automatically. For a security emergency, call (915) 995-2495. Everything else is handled the next business day.
Talk through your firm in 30 minutes.
Thirty minutes. Your questions. A practical next step. Prefer to start on your own? Run CyberGapFinder, our free scan of your domain’s public email and website security settings.