A survey conducted by Oyez Professional Services, in association with the Association of Accountants Innovation & Technology Consultants (IAAITC), has shown a large number of firms are at risk of failing to comply with security regulations.
In the survey of 30 firms, 18 were found to have already experienced a breach.
Oyez said that whilst firms recognise the importance of Information Security and acknowledge the potential impact of a breach, there is a lack of the action to achieve relevant requirements.
40% of practices said it was likely or inevitable they would suffer a breach of regulations.
60% have already had an incident and 70% have carried out no security training in the last year.
Employee error in believed by 73% to be the most likely source of a security breach.
30% were found to be are unaware of the SRA Code of Conduct regulations whilst 53% do not give responsibility for security to the firm’s COLP.
To help legal firms meet their responsibilities, Oyez is offering a free set of entry-level policies and worksheets to get them started.
An information security subscription service is also available that offers a full set of guidance notes, policy templates, staff assessments and awareness posters, plus an on-going free update service to keep policies and procedures up to date with regulatory changes.
Nick Hodges, managing director of Oyez Professional Services, said: “The SRA rules are putting increased demands on many law firms.
"We know that many of our clients have a requirement for increased information security and we are delighted to be able to offer the first system designed specifically to meet the needs of UK legal professionals.”
Paul Holborow, from IAAITC, said: “The legal profession knows only too well the importance of confidentiality and keeping the personal data it holds secure. The reality though is that many law firms need assistance to help them understand their responsibilities and to put the controls and policies they need in place.
“Working with Oyez, who have a proven record of service to the legal profession, means that law firms can now easily access the information, expertise and practical tools they need.”