Ellex received the first information security recognition from the Estonian Bar Association

On 18 November, the Estonian Bar Association issued its first information security certificate to Ellex Estonian office, recognising the firm’s commitment to high information security standards.

Growing cyber threats and tightening regulations require companies and institutions to pay increasingly thorough attention to information security. Ensuring information security is resource-intensive and requires consistent effort. As a result of a two-year process, the Estonian Bar Association obtained an international information security standard certificate this year, and from autumn 2025, the Bar Association will begin issuing information security recognitions to member firms, recognising those that have fully implemented the measures described in the Bar Association’s guidelines.

“The Estonian Bar Association’s information security standard is a regulation that takes into account the specific nature of law firms and meeting it was a challenge not only for the IT department, but also for management and the entire organisation. The work done provides confidence that client data is protected, and cyber threats are identified. However, you can never have too much security, which is why the recognition we have received is not the end of the journey, but only the beginning,” commented Ellex in Estonia Partner Ants Nõmper.

Ellex Estonian IT Manager Madis Toom adds: “The process of obtaining an information security certificate provides excellent insight into the strengths and weaknesses of a company’s management processes. It is a process that helps shape and improve the work of the entire organisation and make it more future proof. The certificate certainly makes it easier to initiate conversations that might otherwise remain in the background or, at worst, go unnoticed. In an environment of growing threats, it plays an invaluable role in enhancing the security of the entire company. Security, however, is not a destination to be reached, but an ongoing, daily, and responsible collective effort.”