Do you need help with your information security program? Law firms find the Data Steward Program (DSP) exceptionally easy to use because of the intuitive SaaS platform and controls adapted for the legal industry. In-house counsel highlight the streamlined options for evaluating and validating law firm self-assessments. As internal demands increase, however, many organizations need to leverage the advanced capabilities of the DSP platform. When they do, it may help to consult a ‘DSP Qualified Service Provider’ that has the technical capabilities and familiarity with DSP to efficiently provide supplementary services.
Law firm self-assessments, compliance gaps, and audits
Regardless of size, many law firms do not always have resource availability or specific expertise for certain tasks. The DSP Qualified Service Provider can supplement your efforts.
- Clone multiple self-assessments to generate distinct security profiles for distinguishing, for example, U.S. vs. APAC systems.
- Interpret applicability and compliance with certain controls.
- Define ‘issues and exceptions,’ and set up the Issue Tracking feature for project management and reporting purposes.
- Perform or assist in remediation of compliance gaps.
- Collect and manage the (optional) evidence repository.
- Clone a secure workspace for conducting client audits.
- Participate in live, remote audit sessions.
In-house counsel panel rollouts, assessment evaluations, and audits
Many legal departments do not have dedicated information security personnel who can leverage advanced capabilities included in the Data Steward platform. DSP Qualified Service Providers can provide expertise that enhances security oversight of outside counsel.
- Expedite and streamline DSP rollouts to your entire panel.
- Monitor the progress and status of law firm self-assessments.
- Tailor 3-tier evaluation options to law firm risk profiles.
- Evaluate each firm’s scope, score, dashboard results, and gaps.
- Establish secure, remote audit workspaces, defining the scope and custom controls applicable to each risk profile and audit.
- Evaluate evidence of compliance.
- Monitor law firm remediation tasks to completion.
DSP Service Provider Qualifications
Whether you are interested in retaining a DSP Qualified Service Provider (QSP), or you want to become one, the QSP designation is given only to service providers who meet strict qualifications.
- QSPs must use the Data Steward Program to conduct their own self-assessment for compliance with DSP controls.
- Demonstrate competence in interpreting the DSP controls and evidence requirements.
- Master utilization of the advanced issue tracking, evidence repository, compliance audit, and reporting capabilities.
- Ability to explain the advantages of the DSP client-centric model, applicability to the range of legal industry organizations, supplementary services available for each, and the DSP FAQs.
Ankura Consulting Group
Ankura’s cybersecurity, privacy, and data advisory suite of services are designed to provide the expertise, experience, scalability, and practical application necessary to meet the rapidly evolving needs of organizations across all industries, sectors, and geographies. Our service areas include: Technology, Privacy and Cyber Risk Advisory; Response, Intelligence, and Investigations; Managed Data Protection Services; and Digital Forensics, eDiscovery, and Data Analytics. Our solutions are scalable, innovative, vendor-agnostic, and custom-tailored to fit the specific risk appetite and resource limitations of each client. Our diverse team supports our clients in addressing current and future risks while meeting long term business goals. Ankura leverages our collective knowledge and experience to provide highly integrated and customizable solutions that evolve to meet the ever-changing demands of threats, regulations, and best practices. Ankura Consulting Group has earned ACC Accreditation for its information security practices, and is an ACC Qualified Service Provider.
ACC Accreditation is an optional service for law firms to receive independent validation of their DSP self-assessments. For in-house counsel, this added assurance inspires a high degree of trust, and can eliminate the need for compliance audits. Law firms from 10 attorneys to the AmLaw 10 have found this low-cost, streamlined process gives clients maximum confidence in their security profile.
More Information
