Cyber Security | Cyber Risk Assessment

Cyber security is the protection of computer systems from unauthorised access or being rendered inaccessible. In a modern society, networks of computers are essential in providing a variety of services which are necessary for our everyday lives. The reliance we place on these systems results in severe disruption when things go wrong.

Cyber crime is any kind of criminal activity that is committed with the use of a computer, making it, and cyber security, a potentially vast area of law, with greatly varying offences including hacking, fraud, harassment and espionage.

The law concerning the use of technology to conduct criminal activity has developed greatly in recent years, in part in response to the volume and sophistication of crimes involving technology. The law concerning cyber security is evolving into a very sophisticated framework of rules and regulations, which can be difficult to navigate.

MacRoberts advises on compliance with the requirements to ensure your business is not at risk, including cyber risk assessments and due diligence processes, incident response, contractual undertaking and transaction/project work.

Why is it relevant to your business?

UK data protection law requires organisations to ensure they have the correct technical and organisational measures in place to ensure the security of personal data and, under certain circumstances, organisations are also subject to data breach reporting requirements.

Failure to implement appropriate security measures can result in significant enforcement action being taken by the ICO, including the imposition of fines, as by the ICO's decision to fine British Airways.

IT system security

Whilst UK data protection laws focus on personal data, the Network and Information Systems Regulations 2018 focus instead on the security of IT systems. The NIS Regulations apply to operators of essential services, such as energy, transport, health, water and digital infrastructure, and to relevant digital service providers, such as online marketplaces, search engines and cloud services. Such organisations are subject to cyber security and incident reporting requirements.

Cyber crime

Cyber crime, such as DDoS attacks, is not limited by borders and investigation of such offences may involve a number of international agencies. The main regulator of cyber crime in the UK is the National Cyber Crime Unit of the National Crime Agency. This agency investigates, prosecutes and polices instances of cyber crime and breaches of cyber security across the UK.

Supporting your business through cyber crime investigations

Cyber crime is a fast-moving area of law, and it is crucial that you contact specialist cyber crime lawyers if you have been affected. We have experience of dealing with cyber crime cases and can navigate the complex rules and regulations in this area. We also offer expert representation at all stages of an investigation should you require it.

In 2016, we were one of the first law firms in Scotland to become accredited Living Wage employers.
Shortlisted for Firm of the Year at the Scottish Legal Awards 2022.
Winners of Corporate & Commercial Team of the Year and Family Law Team of the Year at the Scottish Legal Awards 2020.
Our Real Estate team won the Property Team of the Year Award at the British Legal Awards in 2018.
Winner of SME of the Year at the Scottish SME Awards 2017, hosted by Scottish Business Insider.
Highly Commended for Commercial Team of the Year at the British Legal Awards 2016.
In 2019, MacRoberts achieved Cyber Essentials Plus certification, a UK Government entry-level information security standard.
MacRoberts holds the ISO 9001:2015 certification for Quality Management, the most widely recognised quality management system standard in the world.
MacRoberts holds the ISO14001:2015 certification for Environmental Management, demonstrating our ongoing commitment to environmental awareness.
MacRoberts holds the ISO27001:2013 certification for Information Security, an internationally recognised security gold standard.
Business continuity is a critical element of the Business Management System at MacRoberts and we hold full accreditation with the ISO 22301:2019.
MacRoberts is a member of IP Inclusive, a network of intellectual property professionals working to make our community more equal, diverse and inclusive.
We are active members of the PRIME Programme – an organisation that focuses on ensuring a career in law is open to talent from all economic and social backgrounds.
MacRoberts supports the Scottish Business Pledge, a values-led partnership between Government and business that is based on boosting productivity and competitiveness through fairness, equality and sustainable employment.
We are supporters of the Partnership for Change, a network of organisations and individuals who share a common ambition to improve diversity on boards and in senior leadership.
We are a member of the Employers Network for Equality & Inclusion (ENEI), a UK-based not-for-profit organisation which helps employers build and maintain diverse teams and inclusive cultures through our membership, training, and consultancy services.
In 2022, MacRoberts was awarded enei's Silver TIDEMark. TIDE is enei's self-assessment evaluation and benchmarking tool which measures an organisation's overall approach and progress on diversity and inclusion.
MacRoberts is a Disability Confident employer, and are committed to disability equality across our firm.
MacRoberts fully supports flexible working practices and supports family-friendly working practices.
In 2022, MacRoberts received a Bronze Award in Stonewall's Workplace Equality Index for our commitment to LGBTQI+ inclusivity in the workplace.
MacRoberts is a longstanding member of Scotland Food & Drink, the leading trade association for Scotland's food and drink industry.
MacRoberts is an Associate Member of SELECT, Scotland's largest construction trade association.