Firms holding confidential client information whose reputation depends on protecting it.
Common risks include: Highly confidential client data across email, document stores and personal devices; Client security questionnaires and panel requirements as a condition of engagement; Business email compromise and impersonation targeting fee transfers; Weak offboarding leaving access with departed staff and contractors.