Professional Services

Cyber Challenges for the Professional Services Sector

Weaker security at professional services firms than their larger and better-secured clients can offer back-door entry into clients’ systems, says Ian Kilpatrick. Professional services firms’ areas of expertise range from the law, religious associations, accounting associations, etc.  Professional services normally do not have the budget or capacity for a robust cyber security program and thus offer a gap for cybercriminals to penetrate.  The professional services sector provides a unique store of information for cybercriminals from corporate financial information to PII.

 

Regulatory Obligations and Industry Standards for the Professional Services Sector 

The professional services sector is a diverse one and therefore the regulatory obligations and industry standards are dependent upon the service type i.e. law, accounting, medical, etc. However, there are a few standards that still apply for professional services cyber security no matter the type of service.

The Payment Card Industry Data Security Standard (PCI DSS) was developed jointly by American Express, Visa, MasterCard, Discover and JCB. It requires the use of firewalls, data encryption, monitoring and other controls to ensure confidential information stays safe. While meeting PCI DSS standards is essential, organizations today must adopt more flexible and forward-thinking SIEM solutions if they wish to avoid liability and manage risk — particularly when working in the cloud.

professional services cyber security

Fortalice’s Expertise in the Professional Services Sector

A wide breadth of professional services companies across the country entrust the Fortalice team to provide their cyber security services. Our expertise is relied upon by professional associations from diverse fields including the food sector and detention centers. Our steadfast support for professional services cyber security ranges from providing penetration testing, risk assessments, cyber intelligence assessments, forensics, incident response, and the design of secure technology infrastructures. While our cyber risk client engagements are short, once the relationship is established, our customers come back to us as long-term trusted advisors on the myriad of emerging cyber security issues that they face.

professional services cyber security

Latest from the Wall