- Security-First Managed IT | 24/7 Security Operations Center
- support@cybercore360.com
- Mon - Fri: 9:00 AM - 5:00 PM CT
CPA firms, tax preparers, and financial advisors
Under the FTC Safeguards Rule, tax preparers, accounting firms, and many financial service providers count as financial institutions. That means a written information security program, a qualified individual responsible for it, and specific safeguards like encryption and multi-factor authentication.
The IRS also asks preparers to confirm they maintain a written data security plan when renewing their PTIN. We help you build that program, put the required safeguards in place, and keep everything documented before tax season starts.
The Safeguards Rule requires a written information security program based on a risk assessment. We build it with you and keep it current as your firm changes.
The rule requires you to designate a Qualified Individual to oversee the program. Our virtual CISO can serve in that role or support the person you name.
Your Qualified Individual must report in writing to leadership at least once a year. We prepare that report in plain language. See our compliance programs.
Client financial data, tax season pressure, and the FTC Safeguards Rule, handled together.
A written security program, risk assessment, and annual leadership report, managed on the Compliance plan.
Learn more →The Safeguards Rule requires it for anyone accessing customer information. We set it up and keep it on.
Learn more →Continuous monitoring and automated penetration testing that support the rule's testing requirements.
Learn more →Our Security Operations Center watches every device that holds client data.
Learn more →Tested backups so a failure or attack in March does not cost you tax season.
Learn more →Phishing tests and security awareness training, which the Safeguards Rule expects you to provide.
Learn more →FAQ
It applies to many tax preparers, accounting firms, and other non-bank financial businesses. We help you identify your obligations during discovery.
Yes. Our virtual CISO can serve as your Qualified Individual or support the person you designate. Your firm remains responsible for the program.
Yes. Our compliance program includes a written information security program built around your firm, and we keep it current.
Yes. Support hours depend on your plan, and Advanced and Compliance include extended help desk coverage for the busiest weeks of the year.
Our 24/7 Security Operations Center contains the threat, and we walk you through what happened and what needs to happen next. See how we respond to incidents.
Yes. Insurers commonly ask about multi-factor login, endpoint detection, backups, security training, and incident response before they write or renew a policy. Our free Cyber Insurance Readiness Checklist walks through the controls they ask about, and we help you put them in place. Coverage and premiums are always decided by your insurer.
Not Sure Which Plan Fits?
