Hands signing a formal contract document with a fountain pen

IT Support by Industry

IT Support for Law Firms

Confidentiality is not a policy in a law firm, it is the product. We look after the systems that hold it — and the specific, well-documented ways criminals try to get at a firm's settlement funds.

Most businesses face opportunistic attacks. Law firms face a targeted one, and it is worth naming plainly: settlement funds fraud.

The pattern is consistent. An attacker gets into a mailbox — usually through a password reused elsewhere, not through anything sophisticated — and then simply reads. They wait for a conveyancing matter approaching settlement. At the right moment they send the client an email that looks exactly like your firm's, because it comes from your firm, with amended account details. The money goes and it does not come back.

Nothing about that attack involves malware, so antivirus has nothing to detect. What stops it is authentication, monitoring, and one firm-wide habit. That is where we start.

What matters here

How we help law firms

Stopping payment redirection

Three things do the work. Multi-factor authentication on every mailbox, so accounts are not compromised in the first place. Monitoring that notices an unusual sign-in and the mailbox forwarding rules attackers create, so a compromise is caught early rather than at settlement. And a firm rule that new or changed bank details are verified by voice on a number you already held — with no exception for urgency, because urgency is the attacker's main tool.

Confidentiality and your professional obligations

The Rules of Conduct and Client Care require you to protect client confidences, and the Privacy Act 2020 sits alongside with its own notification duties. Neither says much about technology specifically, which is precisely the problem — the obligation is on you regardless of how the systems were configured. We translate that into concrete controls: who can reach which matters, what happens to access when someone leaves, and whether you could actually establish what an intruder had seen if you had to notify.

Trust accounting and practice management

Firms run on a practice management system — Actionstep, LEAP, Infinitylaw or similar — and on the trust accounting inside it. We support the infrastructure underneath and the security around the accounts that can move money. Access to trust accounting is limited deliberately, changes to payment details are treated as high-risk events, and those accounts get the strongest authentication available rather than the most convenient.

Documents that stay findable

A firm's files are its memory. We work on making that memory reliable and findable: sensible structure in SharePoint or your DMS, version history that works, and backup that covers the practice management system as well as the documents. We also deal with the part nobody enjoys — retention. Holding every file forever is a liability as much as an asset.

In practice

What we put in place for a firm

  • Multi-factor authentication on every mailbox, with no standing exemptions
  • 24/7 monitored detection and response across devices, identity and Microsoft 365, backed by Bitdefender's SOC
  • Alerting on mailbox forwarding rules — the fingerprint of a compromised account
  • Hardened access to trust accounting, separate from general staff access
  • Tested backup covering documents, email and the practice management system
  • A written verification rule for bank details that survives a busy settlement day

Questions

Common questions from law firms

How do we stop settlement funds being redirected?
Layered, and none of the layers are exotic. Multi-factor authentication on every mailbox so accounts are not compromised in the first place. Monitoring that flags unusual sign-ins and the mailbox forwarding rules attackers create. And a firm policy that account details are verified by voice on a previously known number, every time, with no exceptions for urgency — urgency is the attacker's main tool.
Do you support LEAP, Actionstep or Infinitylaw?
We support the environment they run in — devices, network, Microsoft 365, backup, and the security around the accounts that use them — and we work with your practice management vendor on anything inside the application. We are independent of all of them.
What do we have to do if we have a breach?
Under the Privacy Act 2020 you must notify the Privacy Commissioner and affected people if a breach has caused or is likely to cause serious harm, and your professional obligations run in parallel. The practical difficulty is usually establishing what was actually accessed. Monitoring and proper logging are what make that answerable — without them, you are often forced to assume the worst.
Can staff work from home safely?
Yes, and most firms now do. It depends on the access being identity-based and monitored rather than a wide-open VPN, on the devices being managed and encrypted, and on multi-factor authentication being genuinely enforced. Done properly, remote access is not the weak point — unmanaged personal devices are.
We are a two-partner firm. Do we need this?
The settlement fraud pattern does not care how many partners you have; it cares that you handle client funds. Small firms are targeted routinely, and often have less capacity to absorb the loss. The controls scale down in cost, not in necessity.
Will you help with our insurer's questionnaire?
Yes. Cyber insurers ask increasingly specific questions about multi-factor authentication, monitored detection and response, and backup testing. We go through the questionnaire with you, fix what is not currently true, and help you answer accurately.

What our clients say

Reviewed by the businesses we look after

Ash and his team are always professional and helpful. They find solutions to problems, and give you options where they can. They provide a great service and are on hand to give advice whenever it's needed.

Charlie

Anvil Solutions have provided us with a terrific IT solutions service, and I have total confidence in them. The staff are friendly, helpful and experts in their fields. I highly recommend them. Thanks Anvil.

Kathryn

We have utilised the services of Anvil Solutions to manage our IT needs — MS365 accounts, hardware, network, anti-virus, etc. They provide a timely and efficient response to acute situations, regularly send health check reports and supply advice for actions we may need to take to keep our system up to date and secure.

Joanne

The team at Anvil Solutions are always responsive to my needs as a small business owner and I don't think I could run my business without them. Vinodh is really approachable and doesn't mind when I have to ask silly tech questions!

Raechel

I have used Anvil for 7 years now and cannot rate them highly enough. They are attentive, reliable, courteous, on time, excellent at what they do and cost effective. They are the only IT guys I would consider using.

Paul

Ash, Ronesh and the rest of the team have been looking after my company's IT requirements for nearly 10 years now. They're great at interpreting our needs and coming up with cost-effective solutions and are excellent to deal with.

Tania

Great work! Timely, friendly, and always highly professional. Ash and the Anvil team have been supporting and serving our business for many years now and continue to provide excellent service all round.

Matt

We have been working with Anvil for several years now. They are responsive, efficient, knowledgeable, and are constantly looking to improve themselves and their services. We've gone through a couple of major projects together and they went smoothly without a hitch!

Christan

I absolutely recommend Anvil Solutions. I have been thrilled with the practical changes and safety measures Anvil have added to my business. Much loved supplier!

Karen

Outstanding services from this company — no matter who you select. These guys jump to at very short notice, are unflappable and can handle just about any IT challenge (and we have sprung a few on them!)

Caroline

Ashley is a very personable, dedicated and professional — it has been a pleasure working with him sorting out our AV requirements and getting it deployed across our 9 offices.

Stu

Ash and his team at Anvil are by far the best IT company we have come across over the years. Great people to work with, they are thorough in getting the best solution to suit your business and quick to take care of things.

Marisa

Super impressed with the knowledgeable and immediate outcome-led service!

David

We have been using Anvil Solutions for a few years now and their customer service, level of understanding of our business and product knowledge is excellent. Ash is always one step ahead of us when it comes to new projects.

Hamish

NoCowboys reviewed businessRead our authenticated ratings for Anvil Solutions on NoCowboys.

Trusted partners

Backed by partners who meet our high standards

Talk to someone who understands law firms

A straight conversation about what you have, what is actually at risk, and what it would cost to put right. No obligation.