As an accountant, you’re probably working with tons of data daily, be that client financial data or tax information. And what makes the process even harder is dealing with it across various platforms.
As cyber threats toward financial information only grow, accounting firms stand at a higher risk of being attacked by hackers. According to data that Deloitte shared with The Wall Street Journal, cyberattacks on accounting and financial data are becoming a significant concern for businesses. In 2023, 34.5% of over 1,100 C-suite executives surveyed revealed their organizations had been targeted by cyber adversaries.
So that’s where the main question arises: How can you protect valuable data while keeping operational efficiency? This article will discuss the red flags of data security risks in accounting and offer best practices for mitigating and avoiding these threats.
Why financial data is so vulnerable
It’s no surprise that financial data is just a gold mine in the eyes of hackers. A recent IBM and Ponemon Institute report shows that the overall cost of a breach in 2024 has risen to a record high of $478,000 — a 10% increase from the previous year.
The reasons behind these threats are crystal clear. According to a Cofense report, finance is among the top targeted industries due to its vast amounts of sensitive information, including details such as account numbers, personal details, transaction records, etc.
This data is a prime target for attracting unwanted attention from hackers and malicious insiders.
Today’s financial systems are incredibly complex, and this will only add to the challenge. The more integrated your systems, the greater the risk of a breach, especially if you’re missing some key controls such as encryption or real-time monitoring.
alphaspirit – stock.adobe.com
Even though software solutions keep growing, not all providers prioritize accounting security. Many of them fail to invest in critical safeguards like regular security audits or real-time encryption, leaving cracks in the system. And this basically leaves an open door for cybercriminals.
So, how can you ensure your financial data doesn’t become the next target?
As we’ve already mentioned, one of the greatest difficulties of practicing accountants is working with financial data in transition between different systems. Whether your client is managing their sales through various channels of sale, or accepting payment through various gateways, all this information has to be channeled to one system. If it isn’t, you risk missing data, which can lead to discrepancies in the future.
But when data is passed through multiple platforms, how do you ensure its safety? Let’s dive into the major challenges and see how to overcome them.
Challenge No. 1: Data silos and fragmentation. Financial data is often scattered across isolated systems — payroll on one platform, client financials on another, and tax information elsewhere, creating a maze of tools. When these systems don’t communicate smoothly, operations slow down, and the risk increases. Why? Each platform may have different security standards, leaving financial data exposed during transfers.
Solution: Self-service integration tools will ease data management. AI-powered tools can help streamline data from various silos into one cohesive, secure system, making it easier to monitor and protect. And always have a safety net: encrypted backups. This simply means that if something goes wrong, you’re prepared for a quick recovery.
Challenge No. 2: Compliance with regulations. Data security regulations, like GDPR and HIPAA, demand tight controls when handling sensitive financial information. But here’s the kicker: Different platforms often come with their own security protocols, and ensuring that every one of them meets these strict regulations across multiple jurisdictions is a serious challenge.
Solution: Equip your integration platforms with strong security features like encryption, audit trails, and role-based access controls that meet regulatory standards. That’ll be your golden ticket.
Fortunately, most software solutions make it easy to verify their security credentials directly on their websites. So, if you’re looking for a tool to streamline workflows between PayPal and QuickBooks Online, or want to integrate an additional platform for one of your clients, the first thing you’ll be looking for is whether or not the software provides top-tier accounting cybersecurity.
Challenge No. 3: Compliance with regulations. The biggest risk occurs during the data transfer. When data moves between systems, if not properly encrypted, it’s vulnerable to interception. Weak access controls only make matters worse, as unauthorized personnel can gain access to sensitive financial data.
Solution: Encryption should be used with strong mechanisms, such as AES-256 or RSA, to protect your data. Securing the communication of systems via SSL/TLS will ensure that even if your data gets intercepted, they won’t be able to read it. This can be complemented with multifactor authentication, which requires users to verify their identity with more than just a password.
Challenge No. 4: Integrating hybrid systems. Many accountants rely on a mix of cloud-based solutions and legacy on-premise systems, which can be unsafe from a security point of view. These systems often operate with vastly different architectures, data standards, and security protocols, which makes integration difficult and leaves gaps for attackers.
Cloud platforms, while being flexible, tend to be more vulnerable due to their openness, whereas on-premise systems may rely on outdated security measures.
Solution: To close these gaps, accountants should adopt modern integration platforms that support both cloud and on-premise systems. To reduce the attack surface, use secure APIs for communication between systems, with strict authentication protocols like OAuth in place to ensure that only authorized users can access sensitive data. APIs should also be limited to specific functions to minimize exposure.
Conclusion
There are numerous challenges associated with data security in integrated accounting, and finding an effective control solution is paramount both internally and externally. Overlooking these issues or making hasty decisions, especially when handling sensitive financial information, can lead to serious and costly consequences.
To prevent this, accountants must be proactive: Regularly update your security measures, and select reliable solutions that safeguard financial data, both now and in the future.
Mapping the talent hunt;what taxpayers don’t know;new blog on the block;and other highlights from our favorite tax bloggers.
Nothing’s perfect
Validation
Maintaining momentum
Boyum & Barenscheer (https://www.myboyum.com/blog/): What helpful suggestions can nonprofit clients mine from their own audit reports?
Palm Beach Financial and Accounting Services (https://www.pbafs.com/blog): Half a dozen smart ways for young-adult clients to use their refunds.
Institute on Taxation and Economic Policy (https://itep.org/category/blog/): The State of Washington came into the year with strong momentum — the Capital Gains Excise Tax on the state’s highest-income households and the new Working Families Tax Credit, for example. But lawmakers in Olympia now face a $16 billion shortfall, impending federal funding uncertainty and a new governor calling for billions in budget cuts.
New to us
Trout CPA (https://www.troutcpa.com/blog): This Pennsylvania firm offers an array of services in various industries (including agriculture, funeral homes and auto dealerships, among many others) and a fine blog. Recent topics include recent IRS revisions to the 6765 and depreciation recapture on real estate sales. Welcome!
If financial advisors ask clients the rate of return for their rental real estate investment property, they should expect to hear a number at least 5 percentage points higher than the actual one, according to the founder of The Real Estate Whisperer Financial Planning.
That’s because of calculations based on “optimistic assumptions, untracked costs and the absence of formal benchmarking” among many owners, said Rich Arzaga, founder of the Monument, Colorado-based firm, in a presentation at this week’s Financial Planning Association Retreat in Oak Brook, Illinois.
“It’s where ownership bias meets the reality of returns,” Arzaga added. “Whatever they say, knock out at least 5%.”
Despite the substantial role of real estate in wealth, the asset class may sometimes get overlooked by planners who leave an often-emotional decision that is critical to clients’ retirements to professionals from other fields who work more closely on investment properties.
Instead, more planners should maximize their value to clients by taking them through a realistic cash-flow estimate incorporating every expense that they can then apply to a long-term forecast of their assets in retirement, Arzaga said. Even for high net worth clients in particular who generate tens of thousands of dollars in rental income each year, the risks and costs of a property that isn’t meeting their investment expectations can eat up their holdings over time.
“I want to propose that this is an idea that you can use that will expand your thinking about the way we approach this business,” Arzaga said. “I think the way we approach it now is great, but I still don’t see it in any of the curriculum — whether it be the licensing certifications, none of the designations — none of them focus directly on real estate investments.”
Arzaga shared the case study of two 58-year-old clients from San Francisco he called Kevin and Lynn who had a net worth of $3.6 million and rental income of $75,000 per year through a property that was separate from their residence. Through debt service payments and other expenses, however, their costs on the property amounted to $76,000. If the couple followed through on their plan to retire when they turned 65 while keeping the same quality of life that cost them $312,000 a year, they would run out of their assets by age 84, Arzaga estimated.
“Somebody with a $3.6 million net worth, this is kind of not what they expect, right?” he said. “So that’s why they come to us. And luckily, they came to us.”
If the couple were to sell the property in a tax-advantaged 1031 exchange for a better-performing asset or simply spin off their rental holding, absorb the taxes and reinvest the holdings into their long-term portfolio strategy, their assets could amass value hundreds of thousands of dollars or even millions higher than their current scenario.
One of the main misunderstandings stems from the cost of maintaining rental properties, according to Arzaga. In his example, the clients mentioned their amount of income and told him that the number included their expenses. He saw that they had miscalculated when he examined their itemized deductions on Schedule A of their tax returns.
Operating expenses include taxes and the preparation of them, insurance premiums, legal fees related to entity filings and other matters and two major areas — maintenance reserves and property management. In terms of maintenance, the owners should build in costs of about $30,000 to $40,000 every decade for concrete, foundation work, a roof replacement or similar upkeep, Arzaga said. Property management poses difficulty as well.
“Most people like to do that on their own. Most people aren’t capable of that,” he said. “It’s important, and it’s a big asset. And some decisions they’re making are because they’re not professionals in this area.”
These realities may be tough for the clients to hear, but they usually come around after planners lay out the cold calculation of the costs and risks involved with a lot of small-scale rental properties. Assisting clients in making smarter choices about their real estate is “more significant than beating the S&P 500” and a “much more noble cause,” Arzaga said.
“Understanding how real estate can impact a family’s finances, I think, is essential to being a comprehensive advisor,” he said. “You’ve got to be comfortable talking about these things. You don’t have to be an expert, but addressing them, to do a service for your clients.
Joel Cooperman, cofounder and former CEO of Citrin Cooperman, left the firm on March 31 after over 40 years.
Cooperman founded the firm, alongside Niles Citrin, in 1979 when two English rock bands provided the seed money needed to open shop in a small New York apartment. Now, the Top 25 Firm reports over $870 million in revenue, with 27 offices, 455 partners and 3,190 employees.
“I can assure you that Niles Citrin and I never had any plans to build a firm larger than the two of us and maybe a couple of others,” Cooperman said in a statement. “In the early years, accounting was still viewed primarily as a profession and not as a full business – this never really made sense to me. We felt that for long-term success it was critical to create a culture and environment that our partners and employees would enjoy as we all worked to build a thriving sustainable business.”
Joel Cooperman
Citrin Cooperman
Citrin Cooperman was one of the first instances of a major accounting firm accepting a private equity investment, from New Mountain Capital, in October 2021. Then in January of this year, Blackstone acquired a majority stake in the firm from New Mountain, making it the first instance of an accounting firm to transfer private equity ownership from one group to another. And since its founding, the firm has acquired or merged over 65 professional services firms and added other lateral partners.
Cooperman offered advice to those early in their career: “I have always been surprised that so many people do not really understand how much they have to offer, how much potential they have. If I could offer any advice, it would be to figure out what you are good at and what you love to do, make a plan, write it down, and then go after it every day.”