Are Your Accountants and Tax Preparers Following Security Best Practices?

Every tax season, businesses trust their accountants and tax preparers with their most sensitive financial information. From employee Social Security numbers to company revenue reports, this data is highly valuable—and highly targeted by cybercriminals.

But how secure is your CPA’s system? Are they following cybersecurity best practices to keep your business safe? Many business owners assume their accountants have airtight security, but that’s not always the case. This blog will explore the key security questions you should ask your tax professional and why secure document-sharing portals are essential to protecting your business during tax season.

Questions to Ask Your CPA or Tax Professional About Cybersecurity

How Do You Protect My Financial Data?

• Do they use encryption when storing or transmitting your tax documents?
• Are their systems protected by firewalls and intrusion detection systems

Do You Use a Secure Portal for Document Sharing?

• Secure portals provide end-to-end encryption, protecting your data from interception.
• If your CPA requests documents via email, that’s a red flag.

What Security Training Does Your Team Undergo?

• Employees at accounting firms should be trained to recognize phishing emails, social engineering attacks, and fraudulent tax refund requests.

How Do You Prevent Unauthorized Access?

• CPAs should implement multi-factor authentication (MFA) for their financial accounts.
• They should restrict employee access to sensitive tax data based on roles.

What’s Your Incident Response Plan?

• Do they have a clear process for handling data breaches?
• How will they notify clients in the event of a cyberattack?

Why Secure Portals Are Essential for Sharing Tax Documents

Email is Not Secure

• Email is highly susceptible to phishing attacks.
• Cybercriminals use man-in-the-middle attacks to intercept attachments.

Secure Portals Offer Encryption & Access Control

• A secure portal ensures only authorized individuals can access your documents.
• Documents are encrypted both in transit and at rest, reducing breach risks.

Compliance and Legal Protection

• Businesses handling sensitive tax information must comply with data protection laws.
• Using secure portals demonstrates due diligence in safeguarding financial data.

If your CPA or tax preparer isn’t following cybersecurity best practices, your business could be at risk. Take the time to ask the right questions and ensure they are using secure portals to protect your financial data.
In an age of increasing cyber threats, it’s not just about filing taxes—it’s about keeping your business safe.


Would you like help setting up secure IT solutions for your business? Contact us today!