Annual Test Programme & Security Partnership | Global Legal Firm

Client Requirement and Business Drivers

In the early stages of our client’s rapid expansion, they recognised the importance of protecting their critical information assets. They understood that this was equally important for their own data for reasons of complying with data protection legislation, and maintaining competitive advantage; as it was for their customer’s data. Their customers, mostly large corporate enterprises, entrusted very sensitive information to our client as part of the work they undertake on their behalf.

The client had gone through a major upgrade to their infrastructure and LAN/WAN connectivity. This was undertaken by partnering with an international provider of technology based business services. The partner sensibly recommended that an independent expert security assessment was undertaken; Commissum was selected through a competitive process to undertake the first assessment.

Services Provided

Initially Commissum conducted an external infrastructure penetration test of the law firm’s Internet facing presence on the recommendation of the firm’s technology implementation partner. The initial selection was competitive, with Commissum successfully demonstrating the quality of their services as well as excellent value for money. The recommendations from this initial round of testing fed back into the Business Solution Partner’s remedial action and project completion programme.

This experience of independent review of security and the issues uncovered and remedied acted as a catalyst for the establishment of a long term partnership between the Law Firm and Commissum. Initially this included ongoing contracts for external infrastructure penetration testing and monthly vulnerability scanning, but over the years has included:

• Network security training for IT staff
  
• Incident response and forensic analysis
  
• Remote access project security design support
  
• Audit of Active Directory
  
• Corporate security health check
  
• System hardening review & advice