Free live roundtable | Wednesday 25 November 2026 | 12pm–1pm GMT
A client reports a suspicious email sent from a colleague’s account. You suspect their Microsoft 365 account has been compromised.
Who takes charge? What happens first? And how will your firm demonstrate that it responded appropriately?
Join Chronicle Law, Debra Cairns, Managing Director of Net-Defence, and Kristy Gouldsmith, Data Protection Partner and Global Data Protection Officer at Spencer West LLP, for a practical, interactive discussion.
Short illustrative scenario clips will introduce key moments in a fictional email compromise. The panel will explore the decisions and responsibilities involved, bringing together cyber security, data protection, compliance and business resilience.
Before: preparing your firm
- What safeguards, responsibilities and escalation arrangements should be in place?
- Where are the common gaps, and what does proportionate preparedness look like?
During: responding under pressure
- Who leads, who needs to be involved and when should concerns be escalated?
- How should firms assess client impact, communications and potential reporting obligations?
After: demonstrating accountability
- What scrutiny might clients, regulators and insurers bring?
- How can firms evidence their decisions, capture lessons and rebuild confidence?
Practical resources and live Q&A
A downloadable attendee resource pack is planned, covering preparedness, recording decisions and actions, and reviewing lessons learned. Full details will be confirmed before the session.
We’ll finish with a dedicated Q&A so you can put your questions to the panel.
Who should attend?
Managing Partners, COLPs, COFAs, Practice Managers, risk and compliance teams, and those responsible for IT, cyber security or operational resilience within UK law firms.
Register free and consider how your firm would respond when a suspicious email becomes a firm-wide concern.