A closing on Thursday, updated wire instructions on Tuesday, and a paralegal’s mailbox that had been read for three weeks. The three layers that stop business email compromise at a law firm, and the one that is a policy, not a product.
A CPA firm’s server fails at 7:50 on a March morning. The three things that decide whether busy season loses an hour or a week, the quieter phishing risk that runs alongside it, and what examiners expect to see written down.
A revised invoice from the supply rep, a login page that looks like Microsoft 365, and eleven days of someone else reading the front-desk inbox. Why practices are the better target, and the three layers that stop it.
