Skip to content
Merrow

Industry

Legal

Firms handling high-value transactions — M&A, conveyancing — that make them a direct target for invoice fraud and business email compromise.

Regulatory context

Lender panel and SRA requirements increasingly reference Cyber Essentials Plus as a baseline, on timelines set by client deadlines, not the firm's own schedule.

What we hear from this sector

  • High-value transactions attract targeted social engineering
  • Client confidentiality obligations raise the bar on breach handling
  • Certification often needed against an externally imposed deadline