In this episode, we sit down with Mike Worth, Founder of Indi-tech Consultancy, as he unpacks the unique cybersecurity challenges facing small and medium-sized legal firms. Mike highlights a major misconception in the industry—treating cybersecurity solely as an IT problem rather than a broader business risk—and explains why investing in the human aspect of cybersecurity is more effective than relying on tools alone. He discusses the billable hours mindset prevalent in professional services, the opportunity cost of security training, and the importance of creating a positive, engaging, and competitive security culture tailored to staff demographics. Mike also shares insights into common pitfalls SMBs face, such as overspending on ineffective security tools, gaps in cyber insurance coverage, and the pitfalls of generic training programs. He closes with actionable advice on building a resilient cybersecurity culture, measuring progress through behaviour-based metrics, and fostering open, honest risk discussions within the organisation. Mike is a proud Londoner now living in Hampshire, UK. He has worked across various industries covering local and central Government, manufacturing and more recently 11 years of Legal professional services as an IT professional. Mike’s passion has recently seen him start his own IT consultancy targeting support for SMB’s on Cyber security & virtual IT management.