Information Technology

Our information security organisation is staffed with experts in information security, data protection and privacy. Governance of our programme is performed at the highest levels of the organisation, with a governance body made up of our senior leadership. This governance body manages risk decisions related to protecting client data and effects to policies, procedures and technologies in the mitigation of risks.

The specifics of our information security efforts are ongoing and extensive. Some of our major capabilities include:

• Deployment of state-of-the-art security tools throughout our infrastructure. We implement best of breed tools for perimeter defence, malware protection, access control, data loss prevention and infrastructure monitoring. All security tools report into a centralised analysis environment that performs real time correlation and alerting of security threats. We’re constantly monitoring the threat landscape for new threats and looking for technologies that can better secure our information resources.
• An environment that is monitored 24/7 by a security operation centre for threats detected by our technology. Any detected threat is immediately escalated and established response processes are acted upon. Daily operational reviews are held to examine logs from the security tools to determine if additional investigation and/or mitigation is needed. Monthly management reviews of overall security metrics serve as an oversight into the daily activities and allow for any identified deficiencies to be addressed.
• A comprehensive risk management programme, which identifies and manages security risks to the firm. Regular internal and external audits are conducted to identify risks. Identified risks are documented and reviewed with the general counsel, our executive governance body and firm leadership. Risk mitigation strategies are developed, agreed upon and executed in coordination with firm leadership.
• A comprehensive security education and awareness programme. Attorneys and staff receive regular communications on evolving threats, are required to comply with the firm’s security policies and procedures, and must attend compulsory security training on a regular basis.
• State-of-the-art document management systems and monitoring tools to protect confidential client information. Access to documents can be controlled at a client, matter or individual document level of granularity. All document access, editing and movement is monitored for unusual patterns of access, printing, exporting, emailing, or deletion. Ethical screens can be established. Any attempt is made to change access privileges results in the automatic re-implementation of the policy, and administrators are notified of the attempted changes.
• Enhanced document protection capabilities, for particularly sensitive matters. Deployments of enhanced capabilities can include document rights management, download and print blocking, and isolated data storage environments.
• All members of the firm can store files for retrieval by authorised and authenticated clients and other outside parties through our secure file transfer environment. The infrastructure serves as a secure means of transferring large files that might otherwise be placed on unsecured sites or sent via email.
• Our IT policies ensure real-time network management which integrates with a managed firewall barrier of protection to all devices.
• Our Data policy maps directly to global cloud-based policies that ensure real-time exploit protection including an early warning system.
• As Data becomes a valuable commodity the global workspace our company ensures that all data is protected by managed cloud-based security systems that are constantly moving across the globe. This feature allows data scrambling to ensure any potential illegal hack does not acquire a complete data set. Users are authenticated in a multi prong approach to ensure hackers are kept out.

Hardware management is key to ensuring a low-risk downtime policy. We ensure our IT administration conducts daily integrity testing without compromising on hardware processing power. This allows employees to complete work without disruption as the integrity check deploys in a packet-based system.