DATASHEET

Professional Services Industry Brief

Cyberattacks Threaten the Reputations of Professional Services Firms

2nd42%

56%

273%

most common target for
ransomware attacks1of law firms have experienced
a security breach2of law firms do not use
file encryption3

increase in large-scaledata breaches in one year4

Cybercriminals Want Your Clients’ Data
In the normal course of their business, law firms, accountants,
M&A advisors, and other business consultants handle and store
highly confidential personal and business information belonging toclients, including digital intellectual property, patent applications,financial records, tax filings, mergers and acquisitions information,and details of lawsuits. These professional services firms also
rely heavily on digital technology to communicate with clients,
collaborate with colleagues, and manage projects and client files.
As a result, professional services firms are vulnerable to highlytargeted cyberattacks where the perpetrators are seeking to steal
specific information. If client data is compromised, the professional
services firm’s obligation to safeguard this information is throwninto question, and the firm’s reputation can suffer significant
damage. Yet many professional services firms are not adequately
securing their employee passwords or their client data, even as
they implement new digital channels, automation, and remote work
technologies that expand their potential attack surface.
Keeper gives professional services firms the visibility and control
they need to prevent password-related cyberattacks by enabling IT
administrators to manage employee password usage and systems
access throughout the data environment.

Keeper Helps You Protect Your Clients’ Confidential Data
and Maintain Regulatory & Industry Compliance
Professional services firms must comply with a number ofregulatory and industry compliance standards regarding client
privacy protections and systemic cyber risk mitigation. Whilespecific compliance requirements are dependent on area ofexpertise, common mandates that professional services firms face
include:•Sarbanes-Oxley (SOX): Anti-fraud controls that apply to publiccompanies and companies eyeing a potential initial public
offering (IPO).

•Payment Card Industry Data Security Standard (PCI DSS):
Security standards for handling payment card information.

•Statement on Standards for Attestation Engagements No.
18 (SSAE-18): Monitors and enforces controls around theapplications and application infrastructure that impact
financial reporting.

Keeper simplifies compliance monitoring and reporting by giving
IT administrators full visibility and control over employee password
usage and role-based systems access throughout their dataenvironments, with customizable audit logs and event reporting.

Secure More than Just Passwords with Keeper Secure File
Storage
In addition to securing employee passwords, Keeper helps
professional services companies prevent data loss by allowing
them to store sensitive files, documents, digital certificates, private
keys, photos, and videos in a highly secure, encrypted digitalvault. Employees can securely share files with colleagues withconfidence, knowing that only the intended recipients can accessthe shared files.
Keeper uses PBKDF2 to derive authentication keys based on
the user’s Master Password, then generates individual record-level
AES-256 encryption keys locally on the device to encrypt eachstored file. Keeper’s cloud only holds the encrypted ciphertext ofeach file. Sharing between users is performed using PKI to ensurethat only the recipient of a shared file can decrypt it. Keeper’s
zero-knowledge encryption methods ensure that only the user canaccess and decrypt their stored files.

© 2021 Keeper Security, Inc.

DATASHEET

Professional Services Industry Brief

Defend Against Third-Party Vendor Breaches with
BreachWatchTM
Even if your password security is solid, your firm could becompromised through one of your vendors. With remote
workforces having rapidly expanded, cybercriminals are taking
advantage of the myriad of SaaS solutions that businesses aredeploying to enable their remote workforces.
Keeper’s BreachWatch for business protects your organization
against third-party vendor breaches. BreachWatch for businessdoesn’t depend on public breach notifications. It scans Dark Web
forums and notifies organizations in real-time if any employee
passwords have been compromised. This allows IT administrators
to force password resets right away, minimizing the risk ofcybercriminals using them to breach company systems.

IT Admin InsightEvery employee is provided with a secure digital vault. A security
dashboard in the Admin Console provides an overview of weakpasswords, password reuse, and 2FA enforcement, along with Role
Based Access Control (RBAC) to enforce least privilege policies.
Administration may be delegated according to department or byteam leader, and folders and records can be securely shared andrevoked. If an administrator or employee leaves the company, theirvault can be automatically locked and securely transferred. Accesslogs to Keeper vaults can be audited for compliance or forensics.

Flexible Provisioning
Keeper supports the ability to seamlessly provision users andteams from Microsoft Azure AD or other identity platforms using
the SCIM protocol. Keeper also supports API-based, commandline provisioning through the use of Keeper® Commander SDK.
The Keeper Commander SDK is open-source Python code that isavailable for download from Keeper’s Github repository.

Zero-Knowledge Architecture
All encryption and decryption is done on the user’s device.
PBKDF2 with 100,000 rounds is used for deriving a key from theuser’s master password. Each record is encrypted using AES-256,
with a different and unique key that is randomly generated clientside. RSA encryption is used for secure record sharing between
users and teams. Keeper’s infrastructure synchonizes encryptedciphertext between devices. Key pinning is enforced between clientand server. All data in transit and at rest is always encrypted; itcannot be viewed by Keeper Security employees or any outside
party.

Microsoft Active Directory Synchronization
Keeper® AD Bridge synchronizes to Microsoft Active Directory orOpenLDAP. This enables rapid user provisioning and automaticallyadds Nodes (organizational units), Users, Roles, and Teams.
Keeper enables RBAC and the ability to track roles when employee
positions or job duties change. This includes automatically locking
vaults when employees depart the company.

About Keeper Security, Inc.
Keeper Security, Inc. (Keeper) is the market-leading, top-rated
cybersecurity platform for preventing password-related data
breaches and cyberthreats. Keeper’s zero-knowledge security andencryption software is trusted by millions of people and thousandsof businesses across the globe to mitigate the risk of cybertheft,boost employee productivity and meet compliance standards.
Keeper has been named PC Magazine’s Best Password Managerof the Year & Editors’ Choice, PCWorld’s Editors’ Choice and is thewinner of four G2 Best Software Awards and the InfoSec Award forBest Product in Password Management for SMB Cybersecurity.
Keeper is SOC-2 and ISO 27001 Certified and is also listed for use
by the U.S. federal government through the System for AwardManagement (SAM). Learn more at https://keepersecurity.com.

Two-Factor Authentication
Keeper supports multiple two-factor authentication (2FA) methods,
including SMS, Keeper DNA® (smartwatch tap), TOTP (e.g., GoogleAuthenticator and Authy), FIDO U2F (e.g. Yubikey), Duo, and RSA
SecurID. 2FA may also be enforced through role-based accesscontrols (RBAC).

Keeper Third-Party Attestations and Certifications

1CIO Dive

2

FindLaw3

CNBC

keepersecurity.com | sales@keepersecurity.com© 2021 Keeper Security, Inc.