The Security Health Check
Find out exactly where your firm is exposed, before an attacker or your regulator does.
A fixed-fee security review built for law and accountancy firms. A team of senior Microsoft engineers examines your Microsoft 365 estate and your key controls, then gives you a plain-English report your partners can actually read.
Credited in full against onboarding if you become a client within 60 days.
- Report within 10 working days
- Plain-English partner summary
- 45-minute walkthrough call
- Read-only and remote, no disruption
Why firms book this
Three out of four UK law firms have already been breached. The average conveyancing fraud now costs £78,393. The ICO has fined firms £60,000 and £98,000 after incidents their basic controls should have stopped. Yet most firms have never had anyone actually check.
Your regulator expects you to know where you stand. This is how you find out, for a fixed fee, in plain English, with no obligation.
UK law firms have already been breached
average cost of a conveyancing fraud
ICO fines after incidents basic controls should have stopped
What we check
Six areas, examined the way an attacker and a regulator would.
Identity and access
MFA coverage, Conditional Access, admin accounts and legacy authentication.
Email security
Spoofing protection, forwarding rules, external sender controls and payment-diversion fraud defences.
Devices
Encryption, patching and endpoint protection across Windows and Mac.
Data
Where client files live, who can access them, and backup and recovery readiness.
Microsoft 365 configuration
Checked against Cyber Essentials and your regulator's expectations.
The human layer
The processes an attacker actually exploits, like how bank-detail changes are handled.
What you get
A written report
In plain English, ranked by risk, with the cost to fix each item.
A partner-level summary
A short summary you can take to your next management meeting.
A walkthrough call
45 minutes with the engineer who did the work.
Evidence you can show
Proof for your regulator, your insurer and your clients that you took security seriously.
How it works
Book and pay
Book the Health Check and pay the fixed fee.
We get secure access
We arrange secure, read-only access with your current IT provider or office manager. We do not need to replace anyone to do this work.
You get the report
Within 10 working days you receive the report and the walkthrough call.
You decide what's next
Fix it internally, hand it to your IT provider, or ask us to quote. The fee is credited against onboarding if you proceed with us within 60 days.
Frequently asked questions
Yes, and most of our Health Checks run alongside an existing IT provider. General IT support and security assessment are different jobs. The report often finds three or four items the IT company was never asked to look at.
Find out exactly where you stand
Book your Security Health Check and get a plain-English report your partners can actually read, with the cost to fix each item.