Security assessment for accounting firms that hold client tax data
The FTC Safeguards Rule requires a Written Information Security Plan for tax preparers of any size, and IRS Publication 4557 expects the Security Six. We verify what is actually running, not just what the paperwork says.
What we verify behind the paperwork
The Security Six is MFA, encryption, backups, firewall, antivirus, and VPN. We check whether each one actually protects client tax data, and we pair this with our cloud security assessment and code review where they apply.
What is at stake
In the firm's language and the partner or owner's language, these are the exposures a breach creates
Client data
Client tax data is exactly what attackers want. A single exposed drive or mailbox can expose hundreds of filings.
Filing-season downtime
A breach in the middle of filing season stops billable work and can miss deadlines that cost clients money.
Compliance risk
Since May 2024 there is a 30-day clock to notify the FTC after a breach affecting 500 or more clients. A gap you did not know about turns a small incident into a reportable event.
Engagement and pricing
Assessments start at $5,000 and include a free 30-minute consultation. We scope the work to your firm's systems and the tax data you hold.
Based in Long Island and serving firms across the region. See our Long Island security services page, compare options on our pricing page, or contact us to schedule a call.
Protect your client tax data
Book a free 30-minute call. We will walk through your Security Six and tell you where a breach would start.