Is your CPA firm ready for the next cyber threat?
Use our practical, 24-point IT security checklist to review access controls, taxpayer data protection, backups, email security, and incident response before your busiest season.
Get the free checklist ↓Seven areas that deserve attention
Designed for small and midsize accounting practices that need practical safeguards without unnecessary complexity.
Identity & access
MFA, administrator permissions, and employee offboarding.
Endpoint protection
Patch management, device encryption, and network segmentation.
Taxpayer data
Secure portals, application access, and sensitive file handling.
Backup & recovery
Recovery planning, backup isolation, and restore testing.
Email security
Phishing defense, domain authentication, and payment fraud.
Security governance
Written security plans, vendor reviews, and incident response.
AI security & taxpayer data
Approved AI tools, confidentiality safeguards, employee policies, and human verification.
AI tools deserve a place in your security plan
Tax professionals should evaluate how AI tools handle confidential taxpayer information. The IRS Office of Professional Responsibility warns that public or unsecured generative AI systems can present unauthorized disclosure risks. Use secure, enterprise-approved tools with appropriate confidentiality safeguards, and verify AI-generated tax work.
Read the IRS guidance on responsible AI use →
The potential application of IRC §§ 6713 and 7216 depends on the facts, including whether disclosure or use is unauthorized. AI use itself is not automatically a violation.
Get your complimentary checklist
Download the worksheet and use it with your IT provider or internal team. Want a second opinion? Curetopia Networks helps accounting firms review risks and prioritize improvements.
We will only use your information to send this resource and follow up if you request it. No marketing subscription is required.