Skip to content

Home » Sector guides

Sector guides guides

What UK regulators and customers expect of cyber security in specific sectors, and how to test against it.

Book a call

group of people walking on the stairs

Cyber security for law firms: why cyber resilience is now part of professional practice

  • 8 min read

In short. Cyber security is a regulatory obligation for law firms, not just an IT concern: the SRA expects reasonable steps to protect client money, confidential information and systems, and both the SRA and the ICO can act after a breach. This guide covers what the regulator expects, the threats that target solicitors, and the controls that reduce the risk.… 

low angle photo of city high rise buildings during daytime

Cyber security for financial services: what UK regulators expect and how to test against it

  • 8 min read

UK financial services firms are regulated for cyber security through operational resilience rules: important business services, impact tolerances and scenario testing, plus CBEST and STAR-FS for systemic firms, DORA for EU exposure and the new critical third parties regime. What each expects and what a proportionate testing programme looks like.