Primerus Board of Directors Approved Cyber Security Standards:

Phase 1 - Cyber Security Standards:

  1. Multi-Factor Authentication for law firm network login (code sent upon login attempt to a different device that must be entered for access to network), for remote access or any access to cloud systems.
  2. Privileged Access Management and Identification Policy (establishment and termination of law firm network access), with Access Logs and Processes for Audits of Access Logs.
  3. Data Security Policy with Security Patch Management
  4. Security Incident Plan and Breach Notification Policy and Processes.
  5. Internal Risk Assessment and Security Monitoring Policy.
  6. Disaster Recovery and Business Continuity Plan.

Phase 2 - Cyber Security Standards:

  1. Offer of encryption of client and sensitive information in motion (email and text) and at rest (storage and backup).
  2. Change management.
  3. Third‐party risk assessment and engagement procedures (i.e., vendors and consultants). 
  4. Data retention and deletion policy and processes.
  5. Workforce cybersecurity training