Managed IT • Cybersecurity • CloudCODISE-IT field guide · October 2026
Five email checks for a law firm
Questions to ask before the next urgent payment request or suspicious attachment arrives.
1. Protect sign-in
Review MFA coverage and account recovery methods. Ask your provider to explain how unusual sign-ins are investigated.
2. Verify payment changes
Use an independently known telephone number to verify bank-detail changes. Email alone should not be the approval channel.
3. Review forwarding
Check mailbox forwarding rules and delegated access with your email administrator. Remove rules and permissions without a current business purpose.
4. Train with relevant examples
Practice spotting impersonated clients, urgent filing requests and unexpected document links. Give staff a clear reporting route.
5. Plan response
Document who to contact if an account is compromised and how access will be contained. Preserve relevant evidence and involve your legal and insurance contacts when appropriate.
General operational guidance. Consult your IT provider and designated advisers about your specific environment.