Possible Minds / Security services
Cybersecurity for personal injury firms.
Know where client information is exposed. Fix the important weaknesses. Verify the changes. Hands-on assessment and remediation for PI firms and other legal practices.
Start with your systems and concerns. No client files or passwords needed.
The information behind every case
Review the places your team actually works.
Email & staff access
Former staff accounts, administrator access, MFA, forwarding rules, and third-party application permissions.
Websites & intake
Exposed services, software updates, administrative interfaces, forms, and the path an inquiry takes into your firm.
Case files & recovery
Sharing permissions, sensitive records, backup protection, and a scoped restore exercise with your IT provider.
AI & integrations
What your agents can read, send, or change. Credentials, data flows, human approvals, logging, and ways to stop access.
A complete engagement
From exposure to verified improvement.
We agree the systems, methods, people, and deliverables before work begins. Your firm approves material changes. Your existing IT provider stays involved.
- 01
Scope & authorize
Identify your systems, information, and operational priorities. Agree testing permission, access, exclusions, safeguards, and evidence handling before work starts.
You receiveWritten scope and system inventory
- 02
Assess & verify
Combine appropriate scanning with account, configuration, and workflow review. Validate findings and distinguish confirmed exposure from untested areas.
You receivePrioritized findings with supporting evidence
- 03
Fix & coordinate
Implement approved changes within scope. Coordinate vendor-owned fixes, plan rollback, and assign an owner to work that needs your IT provider or another specialist.
You receiveChange log and remediation register
- 04
Retest & hand over
Check that the fixes work and everyday casework still runs. Document residual risks, recovery-test results, and who maintains each protection.
You receiveRetest results and an operating checklist
Evidence you can act on.
A list of scanner alerts leaves your team with another project. Our scope connects assessment to approved remediation and retesting, with unresolved issues made explicit.
Tools may include network discovery, authenticated vulnerability checks, web application testing, and cloud-account reviews, selected for your environment. A tool score alone is not a security conclusion.
- Owner-level summary in plain English
- System and client-data inventory
- Findings ranked by exposure and client impact
- Approved fixes and before-and-after evidence
- Open issues, limitations, and named owners
- Recovery check and maintenance handover
Clear boundaries. No blanket assurances.
Permission before testing
Written scope, controlled access, safe testing windows, and a stop procedure. Vendor infrastructure requires vendor authorization. Intrusive penetration testing is separately scoped with appropriately qualified personnel.
Client data handled deliberately
Agree minimum access, secure evidence storage, retention, and deletion. Do not send records through an initial inquiry or upload assessment evidence to an unapproved AI tool.
A defined service
Scope and pricing follow discovery. This is not a compliance certification, legal opinion, guarantee against breaches, or 24/7 incident-response service. We identify any additional expertise required before accepting the scope.
Suspect an active breach? Contact your incident-response provider, breach counsel, and insurer promptly. This inquiry channel is not monitored for emergencies.
Before we start
We already have an IT provider. Do we need another one?
Start by checking what your current agreement includes. If your provider already assesses exposure, fixes findings, and supplies retest evidence, you may not need duplicate work. We can scope a focused review or implementation engagement alongside them, with clear ownership of each change.
Is this a penetration test or a compliance certification?
The core offering is a scoped security assessment, remediation, and retesting engagement. Exploit-based penetration testing requires a separate scope, explicit authorization, and appropriately qualified personnel. This service is not a compliance certification, legal opinion, or guarantee against breaches.
Can you assess our case-management vendor?
We can review your account configuration, access, integrations, and available vendor security evidence within the agreed scope. We do not scan or attack a vendor's infrastructure without its authorization. A review of your account does not certify the vendor's entire platform.
Do you need our client files?
An initial scoping conversation does not require client files or credentials. For the assessment, we agree the minimum access and evidence needed, use synthetic or redacted examples where practical, and document storage, retention, and deletion arrangements. Sensitive material should only move through an agreed secure channel.
What if we suspect an active breach?
Contact your incident-response provider, breach counsel, and insurer promptly. This consultation is not a monitored emergency response channel or a 24/7 security operations service. Do not wait for an assessment booking to contain a suspected incident.
Start with a clear picture of your firm's exposure.
Tell us your team size, email and case-management platforms, existing IT support, and the concern that brought you here.
Discuss a security assessment