Cyber Risk – scary and real
I was a huge Doctor Who fan as a child. I’m ancient, so my favourite doctors were Jon Pertwee and Tom Baker. I loved the monsters most of all though. There were so many great villains, and while I thought the daleks were OK, they never really felt scary. Giant pepper pots who would struggle to deal with uneven terrain or stairs.
The ones that really used to freak me out and have me cowering behind the sofa were the Cybermen. They were dead eyed, relentless, ruthless and had seemingly infinite resources.
By this point you will be sighing and rolling your eyes at another of Holt’s shoehorning in of cultural references, and to be honest you’re right.
It’s just that we are back in the throes of terrifying cyber threat.
Three or four years ago, any conference you went to featured doom and gloom and scary stories about cyber threat. It became almost an industry joke- the method used by purveyors of solutions for all your cyber risks. The numbers quoted were horrifying- often hypothetical and often using statistics from other sectors, as information specific to legal was scarce.
But we listened, and took steps. At The Cashroom we realised the use of email made us vulnerable so we invested in the development of our secure client communication portal. We, and others, sought certificated reassurance- we are Cyber Essentials Plus accredited. We, and others, implemented detailed training programmes to ensure our people were empowered and vigilant, and working to sensible secure processes.
And for a couple of years, the tone of the messaging around cyber threat calmed a little. Of course there were high profile examples of issues, which kept the threat visible, but the hysteria of the messaging at conferences and in articles cooled off.
However, anyone who thought that the threat had receded is in for a shock. Because the pause in threat level was illusory….it was more a gathering of data, and now the statistics are there to show exactly the seriousness of the cyber threat faced by the legal sector.
I took part in a round table discussion, hosted by our friends at Xyone Cybersecurity, and attended by representatives from the police, insurance, tech and legal sectors. A fascinating discussion took place over coffee and bacon butties, but some of the statistics put us off our breakfast.
- 59% of UK and US companies suffered data breach caused by a third party.
- Two thirds of SMEs who suffer a breach will not survive.
- 90% of data intrusions start with a phishing email.
- Nearly 0.5% of all emails sent globally were phishing emails.
And some stats were specific to the Legal Sector
- 112% Rise in Legal Sector Data Breaches in 2 years
- £11 Million of client money stolen due to cybercrime over 1 year
- 60% of law firms reported to have suffered information security incidents last year
There were some great tips, some of which were pretty obvious, but some (iKettle risk!) were a surprise-
- All your printers, copiers, even iKettles which are linked to your network need the same rigour of security and password regimes as the rest of your tech equipment or else they can be used as a route into your network.
- All your suppliers may provide a route into your systems if they don’t have rigorous procedures and protections in place. Carry out DD on them to check this out.
- If you’re merging with another firm, check their cyber risk levels. If they have malware already on their system it’ll infect your firm when you merge.
- Have a hard copy of your Cyber Incident Response plan, including necessary reference numbers and phone numbers- if you get shut out of your system, you may not be able to access that info!
So the analogy with the Cybermen isn’t too tenuous- they have huge resources. They are relentless and ruthless. They are…scary. It’s time to come out from behind the sofa and face the threat, because it’s real and the mattel plastic replica of a sonic screwdriver just won’t cut it, I’m afraid.
Alex Holt,
Director of Business Development, The Cashroom

We do not have a ‘system’ or software that we use, we simply access the accounts part of your existing Practice Management System remotely. So, all you need is a legal practice management system of some sort, and a means of us accessing it remotely. We also have a secure client portal which all of our clients are on, creating a secure environment for both The Cashroom and client to communicate without the cyber risks of email. This also avoids having to protect sensitive data via email. Training can also be given to ensure you are comfortable when using the portal.
We allocate each client to a cashiering team, headed up by a very experienced senior cashier, essentially your ‘Head Cashier’. They will have a small team of people who will work with your firm, in order that holidays, sickness cover etc, are not a problem for you. You will get to know the two or three people working with your firm very quickly, and build a relationship with them. You can pick up the phone or send a query via our secure client portal to these selected people at any point and be ensured that someone will always be about to help.
change makes the difference between whether you sink or swim. One way that savvy firms are choosing to adapt is by outsourcing essential business tasks, like legal cashiering.
Maximise your resource: Benefit from a cost based on the actual activity and skill level your firm requires, rather than having to fund sufficient senior cashiering resource to deal with complex, high-risk elements, while using that same resource to carry out the more mundane, junior tasks.
addressing. According to research 66% of solicitors feel high levels of stress in their jobs, and each year in the UK, 70 million workdays are lost to mental illness.
Almost half of all the calls received (48%) were made by legal professionals with less than five years’ qualified experience. The Junior Lawyers Division’s resilience and well-being survey also found a huge number of younger legal professionals struggling with work related mental health issues. This research clearly shows that the well-being of people in the legal sector spans all knowledge ranges and doesn’t discriminate between the newly qualified and the more experienced lawyer.
40% reduction in new buyer enquiries. Although the net balance figures for March, April and May were slightly more buoyant with only a -26% net balance of new buyer enquiries. It’s clear that buyers are reluctant to declare an interest in property until October 31st when they know what the country is doing next.
There is light at the end of the Brexit tunnel, and we’re not talking about deal or no deal. Reports have suggested that transactions are slowly starting to pick up. The number of approved sales per branch were eight in April, an increase on the seven per branch the previous month.
I recently ran Manchester marathon. I wasn’t fast, and I wasn’t last – 3hr 31 min to be precise – but sometimes the time is irrelevant . I ran a marathon in 2014 (Edinburgh) and have run the distance a few more times at the end of Ironman triathlons (pre-– children!), but this time around was a little different. I haven’t slept much in the last few months (see earlier reference to children!), and had a busy few months at work and at home, so training was ‘minimalistic’ to say the least. However, aside from a ‘moment’ a few weeks before race day, I knew that I could get round alright. It wouldn’t be a PB, but I would complete the distance. And that’s when I realised that something had changed in the last few years – my perspective. Being able to run a marathon on minimal training was now my ‘new normal’, and I think there is a lesson in that: what you perceive as your ‘normal’ can vastly change over time, and your limits are almost certainly not where you think they are.
You don’t need to go in all guns blazing, signing up to climb Mount Everest next week, but decide what it is you want to achieve, and start taking small, incremental but consistent steps towards it, building momentum as you go. Those daily, weekly or monthly steps towards the goal, over time, are what make the difference. Once you have that consistent practice, what once seemed like a pie in the sky idea will come clearly into view, and be more than achievable. And once achieved, your perspective will have changed, in a positive way, forever. Even if your goal was to start a new business, and it wasn’t ultimately successful, going through the process, and making that your ‘new normal’, will change your outlook, and help you believe that it is not beyond your capabilities should a better opportunity arise in the future.
So, while I would encourage you all to run a marathon – I truly believe anyone can do it with the right preparation and dedication to training – your goal may be something quite different to that. The same principles apply though: identify what it is you want to achieve, commit to it, then train for it in a deliberate and consistent way. Very philosophical I know, but life is short, so set about doing the things you have always wanted to do. And remember, nothing changes if nothing changes.
Under the new rules the concept of unpaid or incurred disbursements has been removed, meaning disbursements are only to be considered as disbursements when paid.
extremely busy and sometime stressful work we all have commitments and strains to deal with in our personal life too. It is vital for all of us to take a step back when needed and deal with our own health. And even if we do not have any existing mental health problems, ensure that we are all looking after our mental health as we do our physical health.
At The Cashroom we have a confidential phone line available to staff which goes to trained mental health professionals that they can call 24 hours a day (you wouldn’t let yourself or even a colleague treat your cancer would you?).The Mindful Employer creates a safe place for staff to call and also has a lot of useful information on its website for staff. We also encourage all staff to look after their mental wellbeing by allowing time during the working day for staff to complete a daily mile outside in the fresh air and we have fresh fruit delivered weekly. We also have our mental health charter displayed in the office for staff to see.
I’m from the generation which used to do everything by landline and letter, so obviously I’ve experienced huge amounts of change over the last 30 years. The latest change within our business relates to our desire to remove as much as possible email communication from our toolkit. We have developed a secure client portal to communicate with our clients, this new technology is also a wonderful task management tool.
get back fully operational.
It is, to some extent, the benefit of our clients not having to worry about holiday or sickness cover again, or the time drain of recruiting, training and managing members of staff, or being able to scale up or down without worrying about the workload implications for employees. But it is more than that. We have taken on the cashroom or ‘finance’ function of 170 law firms, of all shapes and sizes, across the length and breadth of the country. That has allowed us to review how those firms have previously done things, and pick and choose the best and most efficient processes, implementing them into our standard process from which all of our clients will benefit. That, I believe, is where some of the real added value comes – it couldn’t be obtained by recruiting in-house.
processes, without any break in that service at holiday/sickness/busy times, and mitigating their fraud risk. Have a think about your business, and where you really add value to your clients. Doing so is an interesting exercise in itself, and will allow you to strategically review your marketing activities. Let’s face it, no client wants to know you are a ‘long established firm, dating back to….’!! They want you to tell them what sets you apart from the firm across the road, and why they should place their business with you. In other words, what is your value add?
It’s that time of year again where the spring flowers are blooming, the spring lambs are being born and (for some) the spring clean is being negotiated. You may not have considered a spring clean of your IT security knowledge or corporate network security, so we have put together a few quick tips to help you remain safe online and tidy up your corporate accesses.
ent numbers etc. Don’t be afraid to double check any changes with the email sender but call them at a number you know exists or begin a new email chain from scratch. Don’t click reply or use the details in the suspicious email – you may end up “verifying” the change of details with the fraudster!
You need several key attributes to get the most out of a networking event like the Legal Sector Advisors and Suppliers conference. I spent a happy and very productive two days in September with the UK’s leading legal sector suppliers in the gorgeous setting of Ardencote Manor. The days were happy and productive because I was ready with networking powers primed and ready. There’s the obvious requirement for a cast iron constitution. The ability to remain coherent and to retain information after being plied with intoxicating slides and copious quantities of strong information.
You have been asked to do a piece of work, diligently send out your standard letter of engagement, when the client calls uttering the dreaded words…‘the fee is a bit higher than I was expecting – if you can get that down a bit, I’d be happy for you to proceed with the work’. If this situation fills you with dread, fear not! With a little thought and a proper ‘toolkit’, you can confidently go into a conversation with your client on the pricing topic in the future.

From a business perspective if nothing else, maybe we can all work in a more collegiate, helpful and positive way. I’m going to try to do that, and to live life to the full. Dad taught me that before he died, and the full truth of his lessons only now fully hits home.
For those who don’t know my background, I trained as a solicitor at Drummond Miller in Edinburgh and Glasgow. I remained there for about a year post-qualification, th
