COMPLIANCE · OFFSHORE OPERATIONS

Offshore Operations Risk Snapshot

Free for Australian law firms. About 10 minutes.

Answer the questions below about how your firm uses offshore employees, contractors, virtual assistants or service providers. We'll email your Snapshot report within one business day.

Answer "Not sure" where you can't confirm something. That's useful information, not a wrong answer.

Section A: About your firm

Section B: Your offshore arrangements

Which countries are they in? *
How are they engaged? *
What work do they do? *
Which systems can they use? *

Section C: Controls

Answer every question: Yes, Partly, No or Not sure.

P1People and providersWe hold a current list of every offshore person with access to our systems, matched to their accounts.
P2People and providersOur provider cannot subcontract work without our written consent.
C1Client informationEach offshore person can access only the matters and information their role needs.
S1SecurityMulti-factor authentication is enforced on every offshore account.
S2SecurityOffshore access is restricted to approved countries and approved devices.
S3SecurityOffshore personnel work on firm-managed devices or a cloud desktop, not personal devices.
S4SecurityClient information cannot be downloaded, printed, synced or forwarded outside our systems.
S5SecurityNo offshore account has administrator rights.
S6SecurityWe control which AI tools offshore personnel may use with client information.
W1SupervisionOffshore work is reviewed by an Australian practitioner before it is released, and the review is recorded.
W2SupervisionOffshore personnel have a written list of tasks they may and may not perform.
V1PrivacyOur privacy policy states that we disclose personal information overseas and names the countries.
V2PrivacyOur provider agreement requires prompt breach notification, gives us audit rights, and requires return or deletion of our information at the end.
G1Provider governanceWhen an offshore person leaves, their access is removed the same day.
G2Provider governanceWe could investigate an incident involving offshore access, using logs we control.
K1ContinuityWe could continue critical work if the offshore service stopped tomorrow.

Section D: Anything else

Section E: Consent and submit

JurisIT collects this information to prepare your Snapshot report and respond to your enquiry. We store it in our Microsoft 365 environment in Australia and do not share it with third parties for marketing. See our privacy policy for how to access or correct your information.

Want to know what a Risk Review covers first? See the Offshore Operations Risk Review, a sample report, or the obligations that apply to offshore staff.