This document provides an overview and guidance on implementing legal services in a digital environment while considering cyber security. It discusses the benefits of digital transformation, as well as machine learning and AI pros and cons and data privacy issues to consider. The document also includes an implementation checklist and questions for attendees.

1. Implementing Legal in
Tech
A guide to the security considerations when moving
your legal business into a digital environment.
By Kevin Else, Consultancy Director
Kevin.Else@csp.partners

2. Agenda
• Brief introduction to Cyber Security Partners
• The benefits of digital transformation
• Machine Learning and AI pros and cons
• Data privacy
• Implementation checklist
• Q/A

3. CSP
• Cyber Security Partners (CSP) was established in 2016 as a security
consultancy helping clients in the rapidly growing interconnected world.
• Although based in Leeds, we operate across the UK.
• We have 100% success rate at getting our clients accredited to either
ISO2001/Cyber Essentials or Cyber Essentials+ and a 95% client retention
rate.
• www.csp.partners for more information

4. Make sure you benefit from
Digital transformation
• You will not realise the benefits unless:
• You identify the pain points you are trying to eliminate
• You can implement your current controls within the solution
• You know who is responsible for what.
• It has on-going support and post implementation lessons learned
• It is usable

5. Responsibilities when using cloud services

6. ML & AI pros and cons
Pros
• Automation
• Saves time & money
• Releases staff from tedious checking jobs
• Produces audit trail
• ICO guidance available on implementation and the
human review requirement.
Cons
• AI decision making may fall foul of Data Protection
principles
• See ICO guidance Guidance on AI and data
protection | ICO & Risk toolkit.
• Article 22 of UK GDPR states
• “The data subject shall have the right not to be
subject to a decision based solely on automated
processing, including profiling, which produces
legal effects concerning him or her or similarly
significantly affects him or her.”

7. Data Privacy Issues
• The cloud is just someone else's computer
• Difficult to ensure Geo-location rules defined
• Who owns the keys to encryption (KMS v BYOK)

8. Checklist
• Define your security requirements?
• Where is the data held, including backups?
• What certification do they have, if any, (27001/CSA Star/NIST CSF)?
• Secured data in transit and at rest?
• Background checks on staff?
• MFA authentication?
• Monitoring/Audit?
• Vulnerability and Pen-testing?
• Incident handling?

9. Poll
Where are you in your digital transformation journey?
A. All sorted
B. Implementing at the moment
C. Still planning
D. Not for us

10. Q&A
What do you struggle with regarding Cyber Security?