Skip to content
Law Society of Scotland
Search
Find a Solicitor
Contact us
About us
Sign in
Search
Find a Solicitor
Contact us
About us
Sign in
  • For members

    • For members

    • CPD & Training

    • Membership and fees

    • Rules and guidance

    • Regulation and compliance

    • Journal

    • Business support

    • Career growth

    • Member benefits

    • Professional support

    • Lawscot Wellbeing

    • Lawscot Sustainability

  • News and events

    • News and events

    • Law Society news

    • Blogs & opinions

    • CPD & Training

    • Events

  • Qualifying and education

    • Qualifying and education

    • Qualifying as a Scottish solicitor

    • Career support and advice

    • Our work with schools

    • Funding your education

    • Social mobility

  • Research and policy

    • Research and policy

    • Research

    • Influencing the law and policy

    • Equality and diversity

    • Our international work

    • Legal Services Review

    • Meet the Policy team

  • For the public

    • For the public

    • What solicitors can do for you

    • Making a complaint

    • Client protection

    • Find a Solicitor

    • Frequently asked questions

    • Your Scottish solicitor

  • About us

    • About us

    • Contact us

    • Who we are

    • Our strategy, reports and plans

    • Help and advice

    • Our standards

    • Work with us

    • Our logo and branding

    • Equality and diversity

  1. Home
  2. For members
  3. Business support
  4. Technology
  5. Cybersecurity guide
  6. Solutions
  7. Ensuring maximum protection

Ensuring maximum protection

ISO compliance

  • ISO9001 – the internationally recognised standard for quality management systems. Certification to ISO9001 for quality management is commonplace among UK organisations.
  • ISO27001 – a specification for an information security management system. There is an increasing requirement for firms to be certified to the ISO27001 standard for information security.

Cyber Essentials

There is an increasing drive from government departments to ensure that commercial companies in their supply chain conform to best cybersecurity practice. Every firm should implement the UK Government’s Cyber Essentials scheme, which sets out the minimal technical security standard that all firms should meet. This will provide you and your clients with reassurance that you are taking the basic steps necessary to mitigate the cyber risk.

Cyber Essentials

Cyber Essentials– certification consists of online completion of a self-assessment questionnaire which is then reviewed by a certifying body.

  • Certification based on self-assessment / completion of questionnaire.
  • Assessment typically costs £300, but additional support is usually required for small firms.
Cyber Essentials PLUS

Certification as for Cyber Essentials, together with system auditing by an independent assessor.

  • Assessment typically costs around £1,500, with additional costs to support preparation.

Other resources

Cyber Aware

Cyber Aware (formerly Cyber Streetwise)is a UK Government website.

www.cyberaware.gov.uk

Scottish Business Resilience Centre

www.sbrcentre.co.uk

Add To Favorites

Additional

  • Solutions

In this section

  • Tips for individuals
  • Tips for firms
  • Ensuring maximum protection

Mitigo

Our cyber security partner

Find out more about Mitigo
Law Society of Scotland
Atria One, 144 Morrison Street
Edinburgh
EH3 8EX
If you’re looking for a solicitor, visit FindaSolicitor.scot
T: +44(0) 131 226 7411
E: lawscot@lawscot.org.uk
About us
  • Contact us
  • Who we are
  • Strategy reports plans
  • Help and advice
  • Our standards
  • Work with us
Useful links
  • Find a Solicitor
  • Sign in
  • CPD & Training
  • Rules and guidance
  • Website terms and conditions
Law Society of Scotland | © 2025
Made by Gecko Agency Limited