--- title: "IT Support and Cyber Security for Law Firms in Perth | CCP" description: "IT support and cybersecurity for Perth law firms: trust-payment fraud controls, matter-level access and secure AML/CTF record keeping from local engineers." url: "https://ccp.com.au/industries/legal/" --- # IT support for law firms in Perth ## IT that protects trust money and privileged files. Law firms that provide designated services now answer to AUSTRAC, the anti-money laundering regulator. Clients can sue for serious invasions of privacy. One compromised mailbox can redirect a settlement. Our IT support for law firms secures the practice and documents it, from Perth. - Payment-verification and email-compromise controls around trust transactions - Matter-level access so privileged files stay with the right people - Secure retention of client ID and anti-money laundering (AML/CTF) records - **40+ Google reviews** - Perth clients since 2000 - Zero offshoring We hold ISO/IEC 27001:2022 certification from BSI, [certificate IS 840964](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/). ## Cyber security risks for law firms ### Your inbox is the easiest way into your trust account. Business email compromise is one of the most reported and costly cybercrimes against Australian businesses. Property settlements are a favourite target. Since 1 July 2026, firms providing designated services also hold AML/CTF identity records for seven years. - #### Settlement redirection An attacker in your mailbox, or your client’s, sends “updated” trust account details days before settlement. We lock down email and build verification into the process. - #### Privileged data exposure A breach of client files means Notifiable Data Breaches (NDB) reporting and professional conduct questions. Since June 2025 it can also mean claims under the statutory privacy tort. - #### Insurer and AUSTRAC questions PI insurers and AUSTRAC both expect you to show controls, not describe them. We keep the evidence current. ## AML/CTF and privacy changes for law firms ### Conveyancing now comes with AUSTRAC obligations. The dates that affect your IT and data obligations. We track them so you don’t have to. 1. 10 Jun 2025 Individuals can sue for serious invasions of privacy under the new statutory tort. 2. 1 Jul 2026 AML/CTF obligations began for firms that provide designated services, and the Privacy Act now covers that data. 3. 29 Jul 2026 AUSTRAC enrolment deadline for firms already providing designated services. 4. 10 Dec 2026 Privacy policies must explain any automated decisions made using personal information, including decisions made with AI tools. 5. 2026–27 The second tranche of Privacy Act reform is in consultation. It proposes a “fair and reasonable” test for all data handling. ## Law firm cyber security checklist ### Would your firm pass a security review today? Six questions that come up in most reviews by your PI insurer or AUSTRAC. Your answers stay on this page. Ready 0 / 6 Answer the questions to see where you stand. 1. Is multi-factor authentication (MFA) enforced on email, practice management and document systems? Most mailbox compromises start with a phished or reused password. Yes Not sure No 2. Are changes to bank details verified by calling a known number? Never the number in the email. Yes Not sure No 3. Do trust-account payments need a second person to approve? Two-person approval stops most redirection attempts. Yes Not sure No 4. Is access to sensitive matters restricted to the people working on them? Flat access means one compromised account exposes everything. Yes Not sure No 5. Are Microsoft 365 and document systems backed up, with a tested restore? Microsoft does not back up your data for you by default. Yes Not sure No 6. Is there a written incident response plan, including NDB reporting? Work it out before a breach, not after. Yes Not sure No ## What’s included in law firm IT support ### Everything law firms need, from one Perth team. ![A law firm meeting room with shelves of bound law reports, a laptop and a tray of documents on the table.](https://ccp.com.au/_astro/feature.C4Wt-zhy_Z2cS9AI.webp) - #### Helpdesk & device management Unlimited support for lawyers and staff. Laptops encrypted, patched and wipeable if lost. - #### Email security Impersonation protection, filtering and DMARC email authentication, so nobody can use your domain to defraud clients. - #### Practice & document systems Support for practice management and document platforms, and the Microsoft 365 integrations around them. - #### Matter-level access Access controls and audit trails that keep privileged files with the right team. - #### Backup & records retention Restore-tested backups and seven-year retention for client ID and AML/CTF records. - #### Policies & evidence pack Incident response plan, cyber policy and evidence for PI insurers and AUSTRAC. ## IT support reviews, including a law firm ### Trusted by Perth organisations since 2000. Local engineers, long relationships and a lot of referrals. That only happens when the work holds up. [Read more client reviews](https://ccp.com.au/reviews/) > “Tim identified and rectified the issues straight away… I highly recommend CCP for their knowledge and prompt support.” **Monique Atkinson** · CGL Legal > “Thanks Lee for your regular updates, particularly regarding viruses, malware and cyber security!” **Linda Grant** · Google review ## Law firm IT support FAQs ### What partners and practice managers ask us. Something not covered? Call [(08) 9467 2269](tel:+61894672269) and ask an engineer directly. ### Is our firm covered by AML/CTF? If you provide designated services, such as conveyancing, trust work or buying and selling businesses for clients, yes, from 1 July 2026. We don’t advise on legal scope. We handle the IT side: secure know-your-customer (KYC) storage, retention and access control. ### Do you support our practice management software? Yes. We look after the devices, accounts and integrations around it, and work directly with vendors when something breaks. ### Can you complete our PI insurer’s cyber questionnaire? Yes. We answer the technical sections and attach the evidence. Where you can’t yet say yes, we flag it and tell you what it takes to fix. ### Who has access to our systems? Your helpdesk, engineering and admin accounts stay with CCP staff in Perth. For 24/7 threat detection and containment we partner with a specialist security operations centre. We document all of this for your auditors, your insurer and your privacy policy.