Quarterly Law Firm Hardening

Every 90 days, with a trend line on every check.

What it is

Runs twenty-five checks on this computer, the network it is on and the domains you declare, asks your firm's questions once, and maps everything to NIST CSF 2.0 with ISO/IEC 27001 by reference, in one report. Nothing is changed.

A firm's duty of confidentiality is tested by a wire-fraud e-mail, a stolen mailbox or a client file that left with a departure, and clients' outside-counsel guidelines ask for evidence of the controls. This bundle gathers what one office can show: its computers, the client data at rest and the doors it could leave through, your domain, e-mail and look-alike domains, and your own answers.

This is the quarterly form of the Law Firm Hardening Bundle (IND-LAW-86): the same 25 checks, run four times a year, each report showing what changed since the last.

The framework

Mapped to NIST CSF 2.0 — with ISO/IEC 27001 by reference. The report maps what the scan observed on this computer, this network and the domains you declare to that framework's expectations and shows where each finding sits. It is a map of findings to the framework, not a ruling on whether you meet it, and it is not a risk analysis; your industry's expectations stand beside the findings, never in place of them.

Who it is for

A solo practitioner, a small or mid-size firm, or an in-house legal department with its own computers and domain. A large firm or the legal department of a large company is measured across every office and matter system and is the human-delivered engagement's customer; this bundle is one office's first look.

A large firm or the legal department of a large company is measured across every office, matter system and client guideline, often to ISO/IEC 27001 as a whole. That is the work of the human-delivered ThreatVector engagement. This report is still correct about the computer it ran on and is a useful first look for the partner or IT lead who ran it.

What runs (25 checks)

• Windows Security Health Check (ENDPOINT-01)
• Ransomware Readiness Check (RANSOM-READY-03)
• Account & Access Review (INSIDER-ACCESS-05)
• Credential Hygiene Check (PW-HYGIENE-11)
• Out-of-Date Software Scan (EOL-16)
• Startup & Persistence Check (PERSIST-24)
• Wi-Fi & Home Network Check (WIFI-LAN-02)
• Router & Wi-Fi Settings Checklist (ROUTER-22)
• Email Spoofing & BEC Check (BEC-08)
• Breach & Identity Exposure Check (BREACH-10)
• Insider Risk Self-Assessment (INSIDER-21)
• Industry Readiness Questionnaire (READINESS-91)
• Internet Exposure Scan (EXPOSURE-06)
• Website & Storefront Checkup (STOREFRONT-07)
• Certificate & Encryption Check (TLS-09)
• Domain & DNS Security Check (DNS-63)
• Sensitive Data at Rest Check (SENSDATA-78)
• Removable Media & Cloud Sync Check (DATAEXIT-76)
• Workstation Policy & Logging Check (POLICY-79)
• Cloud Storage Exposure Check (BUCKET-28)
• Business Impersonation & Typosquat Sweep (IMPERSON-19)
• Digital Footprint Report (FOOTPRINT-12)
• AI Usage & Shadow-AI Exposure Review (AIUSE-70)
• Travel Connection & Device Safety Test (TRAVEL-72)
• Active Directory Health Check (ADHEALTH-26) — runs only when you give the Windows domain this computer is joined to (leave blank if it is not joined to one)

Before it runs: two questions you can say no to

• May the Removable Media & Cloud Sync Check also read which cloud-sync clients are installed on this computer and which of your folders they hold? It never signs in to any account and never reads a file. Optional. Say no and the report records that this check was skipped at your request.
• May the Sensitive Data at Rest Check count files in this computer's profile folders whose contents match regulated-data patterns (such as Social Security, card or account number shapes)? It reports counts only: never a match, a file name or a path. Optional. Say no and the report records that this check was skipped at your request.

Price

$699 a year, four runs, one every 90 days, with a trend line on every check from the second run. One run on its own is $549: the Law Firm Hardening Bundle (IND-LAW-86).

What it never does

It never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.