Meet the Team: Bill Bowers, Account Manager
Bill Bowers has been a part of the Everest team ever since the Philadelphia office first opened in 2017 and serves as an account manager for the company.
The Importance of Penetration Testing in ISO 27001 Compliance
Penetration testing is an important component of any organization’s security program and can help you evaluate the efficacy of such programs and ensure they are performing as documented while helping you on your way to your ISO 27001 compliance goals.
Meet the Team: Sue Pellegrino, Owner, President and CFO
Sue Pellegrino acquired Everest Discovery in January of 2017 and currently serves as the president and chief financial officer.
Our Time at NAMWOLF’s 2022 Annual Meeting
This last week, Everest Discovery sponsored the NAMWOLF 2022 Annual Meeting that took place in Chicago with owner and president, Sue Pellegrino and managing director John Trickey, attending this event.
Camp Achieve: Epilepsy Foundation of Eastern Pennsylvania
Everest Discovery founder and president Sue Pellegrino has been volunteering at Camp Achieve for the past 15 years, and the company has also participated as a corporate sponsor.
Plan Ahead: Best Practices in Presenting Chat Data in Litigation
In this blog, we shed light on some of the most commonly used workflows for review of chat/conversation data preserved with Cellebrite UFED or collected through Cellebrite Cloud.
Meet the Team: John Trickey, Managing Director of Sales
Everest Discovery LLC, a leading national litigation support and eDiscovery provider, today announces Jim Corcoran has joined the company as vice president of sales. Corcoran brings 27 years of consultation expertise for law firms and corporate legal departments.
Event Recap: The Women’s Business Enterprise National Council
Event Recap: The Women’s Business Enterprise National Council
Every year, the Women’s Business Enterprise National Council, provider of one of the most respected certifications for women-owned businesses, holds its national conference bringing together thousands of women business owners and their teams, supplier diversity professionals and procurement and senior executive representatives from the Fortune 1000 and federal government to create opportunities for women entrepreneurs across the country.
The WBENC National Conference is the largest event of its kind for women business owners. This year’s conference, celebrating the event’s 25th anniversary, took place at the Georgia World Congress Center in Atlanta on June 6-9. Everest Discovery was happy to have two of our own attend this year – Sue Pellegrino, president and chief financial officer, and John Trickey, director of sales.
Networking and Education
The event was an incredible opportunity for Sue and John to connect in person with other women-owned businesses and their teams and watch demos to learn about their products and services. Everest belongs to WBENC East, and the conference gave us the chance to network with people in our own backyard and meet with our regional partner organization members. Most of the companies Sue and John connected with had their head of supplier diversity and procurement buyers in attendance.
Through the course of three jam-packed days, Sue and John got to interact with representatives of over 300 women-owned businesses. The Meet & Greet was a great opportunity to network and connect with other corporate members in an open but structured format – almost like speed dating for businesses. The various receptions were another chance for networking, as well as offering plenty of fun, food, and libations.
A highlight of the conference was the informative seminars and speakers. One that stood out was a fireside chat with federal government representatives about small business procurement. The session explained how the SBA and GSA have increased their support for small businesses with new leadership and resources for accessing the Women-Owned Small Business Federal Contracting Program. The fireside chat also explored the ways Women Impacting Public Policy is advocating for change for women on Capitol Hill, with a theme of getting involved and sharing your voice. Attendees left with plenty of tips and guidance for working with the federal government.
Another informative session, entitled “Positioned to Thrive,” focused on evaluating your business and strategies for growth and protection. The panel discussed the importance of knowing the value of your business, as well as the things that are driving or limiting that value. Among the big messages was the need to have owner life insurance as part of your business continuity plan so that you know how your business will survive when you’re no longer there to run it.
Small Business Trends
Several trends emerged as takeaways from the conference. First, companies are seeking a greater buy-in from their legal departments to implement diverse purchasing initiatives. Second, many companies are not only trying to get their legal departments to support diverse companies, but also to allocate their spend through strategic sourcing to realize cost savings. Finally, legal spend is emerging as an area for great overall cost reduction if traditional purchasing procedures are utilized.
The entire event was very well organized, with its own devoted app that provided the schedule of events, bios for speakers and exhibitors and a place to take notes. Shuttles took attendees to the convention center, as well as to an enjoyable night at the Atlanta Aquarium, featuring the beluga whales exhibit, karaoke and a fun, relaxed time for everyone who attended. If you’re thinking of joining WBENC in the future, we recommend comfortable shoes!
Everest Discovery is proud to be a WBENC-certified Women’s Small Business Enterprise and an SBA-certified Women-Owned Small Business. To learn more about how Everest can support your organization’s eDiscovery and litigation support operations through actionable insights that will transform your workflows, reduce risk and generate significant cost savings, contact us today.
The 6 Steps Law Firms Need to Take to Become ISO Certified
The 6 Steps Law Firms Need to Take to Become ISO Certified
By Mihir Mistry and Sue Pellegrino
In a world where cybersecurity is a critical, ongoing concern, law firms need to be doing everything they can to protect the vast amounts of sensitive and confidential information they possess. We’ve already seen major law firms fall victim to the devastating security breaches at the hands of sophisticated hackers.
Now is the time for law firms to show their commitment to keeping their client data secure. The International Organization for Standardization currently develops and publishes the most highly respected international security standards and offers certification for law firms that want to demonstrate their commitment to security. ISO certification is a time-intensive process, but one that is worth it for the peace of mind and competitive advantage it offers.
What Is ISO Certification for Law Firms?
An ISO certification is a signal to your clients and others in the industry that you’re serious about security and dedicated to creating the safest environment for the data you handle. The relevant certification standard for law firms is ISO 27001, pertaining to Information security management.
As cybersecurity concerns continue to increase, more and more of your clients will be looking at ISO certification as a key measure in evaluating outside counsel hiring decisions. Therefore, ISO certification is not just a valuable component of security, it’s also increasingly a requirement for maintaining a competitive advantage in a tight legal market.
The Steps to ISO Certification
Obtaining your ISO certification is a process that typically takes nine months to a year. In that time, Zaviant will guide you through the following six steps to ensure that the process goes smoothly.
Step 1: Discover
The first step is to develop your organizational content. This starts with a current state analysis, where you assess everything in your security environment – including your people, process and technology. The goal is to get a realistic picture of how secure you are now and where you can stand to make improvements.
Step 2: Plan
After you know where you stand, you need to establish a clear plan for where you need to get in order to be ready for certification. This includes defining the scope of your activities and creating a Statement of Applicability that makes clear how you’ll treat any risks you’ve perceived in your security, including the processes, systems and stakeholders involved. It’s critical to have your leadership on board if your plan is to succeed.
Step 3: Do
A few months of your certification process will involve implementing the measures and procedures necessary to meet ISO 27001 standards. This includes developing a clear security manual for your firm, training your workforce on that manual and reviewing their activities. You’ll also be implementing a vulnerability and penetration testing program designed to internally spot and exploit any security vulnerabilities that still exist, which mimics formal vulnerability and penetration testing that will be later performed as part of the ISO 27001 certification process.
Step 4: Check
After you’ve implemented and reviewed your new security measures, it’s time to truly put them to the test. ISO 27001 is designed to certify that your firm’s information security management system is effective for your firm’s purposes and potential risks. Therefore, you need to conduct an official ISMS review to make sure your objectives remain appropriate and that you’re meeting them. We conduct this review by monitoring and analyzing key KPIs in a sophisticated metrics dashboard.
Step 5: Act
The final step before you turn things over to an external auditor is to conduct a strict internal audit to confirm that you’re properly following your new policies and procedures and that you have an organizationwide understanding of the ramifications for failing to do so. If anything fails your audit, now is the time to take care of any leftover remediation steps.
Step 6: Certify
The last step is to undergo an official audit led by an external auditor. The Stage 1 Audit reviews your management system documentation, and auditors will evaluate your security conditions, KPIs, processes, procedures and more. If you pass Stage 1, the Stage 2 Audit evaluates whether your processes are in compliance with your management systems. If errors are found, you’ll have a chance to correct them. Once you successfully pass the Stage 2 Audit, you’ll obtain ISO certification.
Showing a serious commitment to security, and specifically obtaining ISO certification, is critical to remaining competitive in today’s legal market.
Check out an article from the May 2022 issue of Cybersecurity Law & Strategy on this topic – The Importance of ISO Certification for Law Firms.
About the Authors:
Mihir Mistry is the vice president of security and operations at Zaviant Consulting, a leader in cybersecurity, data privacy and compliance consulting.
Sue Pellegrino is the owner, president and CFO of Everest Discovery, a leading national litigation support and eDiscovery provider.
Why Paper Discovery Is Still Critical in Today’s Digital Legal Industry
Why Paper Discovery Is Still Critical in Today’s Digital Legal Industry
Technology has irrevocably ingrained itself in the world of discovery. If you’re like most litigants, you probably engage in more eDiscovery than paper discovery these days.
The reality, though, is that paper isn’t going away anytime soon, if ever. That means you need a discovery partner that has full capabilities to handle both electronic and paper files under one roof. This way, you can be confident that you’re always meeting your discovery obligations in the most cost-effective, efficient and secure way possible.
The Progression from Paper to eDiscovery
From our personal lives to our work lives, there’s no question that we’ve seen paper gradually give way to electronic documents, email, payment apps and other technologies. The same is true of discovery. While eDiscovery was once a novel new area in litigation, today it’s the norm.
As a result of this shrinking amount of paper, many discovery vendors have stopped handling paper altogether, choosing instead to focus solely on eDiscovery. The problem with this approach, though, is that the world isn’t as “paperless” as many people like to think.
Paper is still prevalent in the business world, even if it might be at smaller volumes than it once was. You’d be hard-pressed to find a case today that doesn’t involve some paper discovery files. Whether it’s because even the most technologically advanced companies still have file cabinets on-site for certain kinds of documents, some people still just prefer to work on paper, current litigations can involve older matters when paper was the norm or any number of other reasons, paper is still critical. In all these instances, these paper files need to be scanned in and hosted on an eDiscovery platform to fully meet your discovery obligations.
The Realities of Paper Discovery Today
So what happens when an eDiscovery-only company must deal with paper? There’s only one solution: outsourcing.
No matter how efficient an eDiscovery vendor is, if it no longer has the scanning, copying and other capabilities necessary to handle paper discovery, it will need to work with another vendor – like Everest – that does.
Everest Discovery: An eDiscovery Company with Paper Roots
At Everest Discovery, our core services today revolve around technology and litigation support, including eDiscovery, but our roots are in paper discovery. Because of this, we are able to offer both options to our clients and have the expertise and knowledge for insight and guidance on what’s best for specific cases.
Everest Discovery began handling paper discovery at the company’s inception in 2005, and we didn’t stop our paper offering when others did. As a result, we serve as a partner to many of the largest eDiscovery vendors which no longer have these capabilities in-house. We take care of collecting the paper files, scanning them (whether in our facilities or on-site), returning the files and then delivering the new electronic versions to be hosted in an eDiscovery platform of the clients choosing.
Management Roots Run Deep in Paper
In 2018, Tom Pellegrino joined Everest as CEO, seeking to guide the company with his perspectives on management, sales and business development in the litigation support world. He brought with him over 30 years of litigation support experience across many facets of the legal industry.
Prior to joining Everest, Tom was co-owner of Copy Secure from 2001 to 2015 which established itself as a leading paper discovery vendor in the Philadelphia region and grew very quickly in an incredibly competitive industry. In 2015, Copy Secure had become so successful that it attracted the attention of a prominent global eDiscovery company, leading to an acquisition later that year. Tom stayed on after the acquisition as general manager and director of business development and headed up the paper discovery division for the entire region.
His expertise, along with others at Everest, has made the company thrive in all aspects of discovery.
Discovery All Under One Roof
In addition, we offer several other traditional, paper-based services, including oversize printing and preparing trial binders. Because we understand that paper in the legal industry isn’t fully going away anytime soon, we’re committed to continuing to handle paper – just as we did when we opened our doors.
Everest Discovery continues to handle both paper and electronic discovery under one roof. With something as important as meeting discovery obligations on the line, you want the most efficient, secure and streamlined approach. Everest understands your critical discovery needs and is truly a one-stop discovery shop.
Contact us today to learn more about how Everest Discovery can help with all your discovery and litigation support needs.
