№ 01
Insurance renewal is hardening.
Insurers are asking for evidence, not assurances. An MSP's "we've got that covered" is no longer an acceptable answer to the underwriter.
Sector · Legal
Fixed-fee · In writing
Built for the questions partners are now being asked.
Cyber is now a board question, not an MSP question. Adeo gives the managing partner — and the firm's risk partner — a plainly-written, independently-produced answer they can table.
Measured againstACSC Essential Eight · APP 11 · section 180 director duty · your insurer's control set
Why now
Sector pressure points
Why legal firms come to Adeo.
№ 02
Cyber is a top-three board risk.
ALPMA's 2024 survey put cyber as the top business risk for Australian law firms — with only 45% of boards rating their own cyber maturity as adequate. The gap is widest in mid-sized practices.
№ 03
Section 180 duty of care.
Director duty of care now explicitly includes cyber posture. Partners sit in two chairs — as lawyers for clients, and as directors of their own practice.
№ 04
APP 11 and client confidentiality.
Client confidentiality obligations create exposure the MSP's service contract rarely speaks to. The firm owns the breach, not the vendor.
№ 05
Matter systems outpace governance.
Matter-management platforms, third-party counsel portals, and external sharing are rising faster than the oversight around them.
Engagements
Fixed-fee, in writing, before work begins
How Adeo works with managing partners.
№ 01 · Entry
Quick-Scan
Scoped to one domain · days, not weeks
№ 02 · Flagship
Baseline Audit
Scoped to the engagement
№ 03 · Ongoing
Technology Advisory
By tier · sized to headcount
Recurring · Artefact
Adeo Pulse
By subscription · monthly
Full engagement details live on the Services page. Every proposal is written in advance; there are no retainers, renewals, or recurring charges without your signature.
First engagement
What the brief typically surfaces
What the engagement is built to find.
On a first engagement with a 30 – 80 staff firm, the work is designed to surface defects of a shape self-assessment rarely catches:
- 01A practice-management service account — LEAP, Affinity, iManage, or your equivalent — with full read/write across the matter database, a multi-year-old password, and no presence in the firm's MFA, conditional-access, or offboarding workflow.
- 02A signed and paid backup contract with no documented restore test on file. The single piece of evidence cyber-insurance underwriters most consistently ask for at renewal.
- 03Mailbox-forwarding rules and matter-folder share links that have outlived the staff member or the matter that created them — including share permissions on confidential briefs that were never set to expire.
- 04Conditional-access exceptions added for a partner's travel or a project deadline, then left permanent in the policy with no documented owner.
The output is a document a managing partner can forward to the MSP with one line: "we need these actioned, please confirm timeline."
Independence, plainly
Adeo's only source of revenue is the fee your organisation pays us.
That limits what we can earn. It is also the product. No vendor commissions. No MSP referral fees. No resale margin. In either direction.
What we will not do
- × Run helpdesks, desktop management, or production systems.
- × Resell software, hardware, or licences.
- × Take commissions from any vendor, MSP, or insurer.
- × Brief a board without the engagement sponsor in the room.
Next step
A thirty-minute conversation, at no cost.
Email contact@adeo.au. Reply within one business day.
Start the conversation →