ByrneWallace has become the first large law firm in Ireland to be awarded certification to ISO 27001 standard, the recognised international standard for information security management.

ISO 27001 provides a best practice framework that helps organisations to manage and mitigate the risks of data management, protecting against information threats and vulnerabilities and safeguarding client information.

The standard provides a set of standardised requirements for an information security management system which ensures that the highest standard of controls are in place to address confidentiality, integrity and availability of information on customers, continual asset protection, IT governance and legal compliance.

Managing partner Catherine Guy said: “Information security and cybersecurity is a primary risk for any business. The incidence of cyber attacks in Ireland has almost doubled since 2012 and, having advised clients extensively on cybercrime and related issues, including data protection, we understand the serious impact a security breach can have on a business and the growing need for every business, including professional advisers, to have in place adequate control mechanisms to mitigate such threats and safeguard client information. Clients expect excellence from their advisers and they expect that their data is secure.

“We believed that obtaining ISO certification was the best way to ensure international best practice in data security management. Following a comprehensive risk assessment process, we began significantly enhancing all our data management processes and controls to the point where we passed the rigorous ISO 27001 test.

In Association with

Michael Brophy of Certification Europe added: “A number of high-profile hacks and data breaches around the world in recent times has brought the issue of information technology security to the forefront of the world’s attention. Having achieved an ISO 27001 certification, we are confident that ByrneWallace has continually demonstrated their commitment to maintaining the confidentiality of its clients’ data and protecting this information from misuse, corruption or loss.”

Photo: Catherine Guy and Rob Lyons of Certification Europe