The Center for Audit Quality and the Anti-Fraud Collaboration released a new publication on the role of the auditor in assessing and responding to fraud risk.
The online publication includes insights into practices, tools and considerations that can help auditors enhance their professional skepticism and overall approach to dealing with the risks of material misstatement resulting from fraud during an audit.
“Auditors should continually strive to enhance their professional skepticism to effectively assess and respond to fraud risks, including considering when it may be important to elevate the basic level of skepticism that is applied throughout the process of any audit and being cognizant of biases that can impede professional skepticism,” said the report.
Courtesy of the Center for Audit Quality
The report pointed out that the mitigation of fraud risk is most effective when all participants in the financial reporting ecosystem fulfill their roles in deterring and detecting fraud. Auditors, although they’re often the last line of defense due to the scope and timing of their engagements, are among the many stakeholders whose influence and responsibilities have a significant impact on fraud deterrence and detection.
In addition to the CAQ, the Anti-Fraud Collaboration includes several other organizations: the Institute of Internal Auditors, Financial Executives International, the National Association of Corporate Directors and the Association of Certified Fraud Examiners. ACFE recently hosted a conference in New York and published a new report, the 2024 Compensation Guide for Anti-Fraud Professionals. It discusses the salary and benefit differences for anti-fraud professionals in relation to factors such as gender, age, experience, region and more.
According to the 2024 guide, the median compensation for female anti-fraud professionals surveyed was $102,000, compared to $108,000 for males. This $6,000 pay difference is much smaller than the pay difference noted in the 2014 guide ($13,500).
Gender diversification in the anti-fraud profession is increasing. Females made up 42% of survey responses in the 2024 report, compared to 35% 10 years ago in the 2014 report.
The highest median compensations were for CFEs in the United States ($120,000) and Australia ($102,704). The CFE premium (the compensation percentage difference between CFEs and non-CFEs) observed through survey results has increased 7% in the last decade.
One of the panels at the ACFE conference focused on the role of whistleblowers in uncovering fraud. Darin Ohland, senior vice president of demand generation and marketing operations at Navex, pointed out that whistleblowing reports are at an all-time high, up about 7% over last year, according to the company’s whistleblowing and incident management benchmark report, and that trend holds true across industries of all sizes. “Whistleblowing is taking on additional strength as we go forward,” he added.
In the modern world of digital finance, securing bookkeeping data is not just a good business habit—it’s absolutely essential. Bookkeepers work with confidential financial records, including income reports, payroll details, tax filings, and banking information. As cyber threats continue to evolve, protecting this data is a critical step in maintaining trust, ensuring compliance, and supporting business continuity. Let’s explore effective, easy-to-understand strategies that bookkeepers and businesses can use to strengthen their data security and avoid unnecessary financial risks.
Control Who Has Access to Financial Data
One of the first steps in keeping bookkeeping data secure is managing access control. Not every employee in a company needs access to financial information. Set permissions so that only those who absolutely need access—like bookkeepers, accountants, or certain managers—can see or edit sensitive records. This limits the chances of internal data leaks or accidental changes.
Use multi-factor authentication (MFA) for all financial software platforms. This adds an extra layer of protection beyond just a password. Even if a hacker steals someone’s login details, they can’t access the system without the second form of verification. Regularly conduct access reviews and audits to make sure permissions are current and appropriate.
Encrypt Data at All Times
Think of data encryption as the protective armor surrounding your financial files. Encryption converts information into unreadable code that can only be unlocked with a special key. Whether you’re storing records in the cloud, on a local device, or sending financial statements to clients, encryption ensures your data stays protected from cybercriminals.
For cloud-based accounting systems, make sure the provider offers end-to-end encryption and follows industry security standards. Also, be sure any email or messaging platform used to transmit bookkeeping data uses secure, encrypted connections.
Create a Reliable Backup Plan
Backing up bookkeeping data is a huge part of data security. A good rule to follow is the 3-2-1 backup strategy:
Keep 3 copies of your data.
Store them on 2 different media types (like a computer and an external hard drive).
Keep 1 copy off-site, either physically or in the cloud.
This ensures that if your local systems are ever hacked, damaged, or lost due to hardware failure, your financial data is still safe and recoverable. Set up automated backup schedules to keep your backups current, and test the restoration process regularly to ensure you can access the data when needed.
Keep Accounting Software Up to Date
Outdated accounting software can become an open door for cybercriminals. Software providers release security updates and patches to fix bugs and defend against new threats. If you’re using software like QuickBooks, Xero, or Wave, enable automatic updates whenever possible. Check for updates weekly if you’re managing the process manually.
Always keep any antivirus and firewall systems active and updated. These tools act as your first line of defense against malware, ransomware, and other digital threats that could compromise your financial data.
Train Your Team on Data Security Best Practices
Technology alone can’t prevent security breaches. Human error is still the leading cause of many data security incidents. That’s why it’s important to train everyone involved in bookkeeping—even if it’s just a few team members—on cybersecurity basics.
Training should cover how to spot phishing emails, create strong and unique passwords, handle data responsibly, and respond to suspicious activity. Even quick, regular refresher sessions can greatly reduce your risk.
Keep a Clear Audit Trail
Document everything related to financial activity and data access. This includes who logs into your accounting systems, what changes they make, and when. Keeping an accurate audit trail helps you identify the source of any errors or breaches quickly. It’s also vital for regulatory compliance, especially if you undergo an audit by the IRS or other financial authority.
Choose bookkeeping software that includes activity logs and make sure they’re enabled. These logs can help you track down security problems before they get worse and provide evidence if something ever goes wrong.
Make Security an Ongoing Priority
Cybersecurity is not a one-time project. It’s a regular part of doing business in the digital age. As your business grows and technology changes, your approach to bookkeeping data security must evolve too. Review your data protection strategies quarterly, and update them to keep up with new threats and industry trends.
It’s also wise to stay informed about bookkeeping regulations, data privacy laws like GDPR or CCPA, and compliance requirements that apply to your business. The more proactive you are, the safer your financial records will be.
Data Security is the Foundation of Trust
Maintaining data security in bookkeeping is about more than just protecting your business—it’s about preserving your clients’ trust and your company’s reputation. From managing access controls and using encryption to updating software and training staff, each small step adds up to a stronger defense against potential threats.
When you make data protection a core part of your bookkeeping process, you reduce risks, improve accuracy, and ensure your business is always ready to face challenges. Remember, a secure bookkeeping system is the foundation of a successful, trustworthy, and future-ready business.
Artificial intelligence has indeed led tech-forward firms (including those in this year’s Best Firms for Technology) to be more efficient and productive in both client-facing and administrative tasks, but at the same time professionals have found the technology still struggles with precision and accuracy, which limits its usefulness for complex work.
On the positive end, firms such as the Texas-based Franklin Alliance reported that adopting AI technology has dramatically increased their capacities as bots take on repetitive manual tasks with an ease and a speed far past more conventional automation setups, allowing accountants to focus more on higher value tasks.
“What’s been most impressive about the AI tools we’ve explored is their ability to dramatically reduce the time spent on repetitive, manual tasks—things like document summarization, data extraction, and even early-stage tax prep. In the right context, these tools create real efficiency gains and allow our team to shift focus to higher-value advisory work,” said Benjamin Holloway, co-founder of Texas-based Franklin Alliance.
madedee – stock.adobe.com
For some, like Illinois-based Mowery & Schoenfeld, these efficiencies have been most impressive on the internal administration side, with AI effectively taking care of the non-accounting work that nonetheless keeps many firms afloat, especially where it concerns meetings.
“Truly most impressive and a huge time savings for us has been AI’s ability to record and summarize Team meetings. Circulating notes and reducing administrative burden on such activities has freed up much capacity, both for our admin side and for partners or management who are not able to be at every meeting,” said Chris Madden, director of information technology.
Others, like top 10 firm Grant Thornton, emphasized AI’s benefits in client-facing activities and noted that it has been especially meaningful in its risk advisory services at least partially due to the firm’s recently-launched CompliAI tool, designed specifically for this area.
“The tool uses generative artificial intelligence and was developed using Microsoft technology, including Microsoft Azure OpenAI Service. CompliAI’s ability to quickly analyze vast datasets and identify potential risks has proven invaluable in combining Grant Thornton’s extensive global controls library with generative AI models and features, including AI analysis, ranking and natural language processing capabilities. As a result, our employees can run control design and assessment tasks in minutes, versus days or weeks. This means clients enjoy faster operational insights, which could amount to a new level of efficiency and a path toward transformative growth,” said Mike Kempke, GT’s chief information officer.
Another positive frequently mentioned, such as by top 25 firm Cherry Bekaert, has been the accessibility and ease of use for many AI solutions even for those without strong technical capacities. Assurance partner Jonathan Kraftchick said this means they did not need to wait long before they began seeing results.
“The most impressive aspect of AI has been its ability to add value with minimal ramp-up time. Many of the tools we’ve implemented have a low barrier to entry, allowing users to start experimenting and seeing results almost immediately. Whether it’s drafting content, conducting accounting research, summarizing meetings, normalizing data, or detecting anomalies, AI has consistently helped accelerate tasks and enable our teams to focus on higher-risk or higher-value areas,” he said.
Several firms, such as California-based Navolio & Tallman, also mentioned improvements to broad strategy and ideation, saying it’s been good for enhancing creativity and accelerating the early stages of their work.
“We’ve still seen value in AI as a jumping off point for ideas and strategy. It’s been helpful for brainstorming, drafting early versions of client communications, and supporting high-level planning conversations,” said IT partner Stephanie Ringrose.
Inconsistencies, inaccuracies, insufficiency, and insecurity
At the same time, firms over and over again said that while the strength of AI comes in handling simple jobs, it often lacks the precision and consistent accuracy needed for higher value accounting work. While it can certainly generate outputs at an industrial scale, trusting that those outputs are correct is another story for firms like Community CPA and Associates.
“AI is incredibly useful for certain types of tasks, such as summarization, data extraction, answering simple questions, drafting communications or documentation, brainstorming ideas, or serving as a sounding board. However, we have observed that most AI tools we’ve tried have difficulty with complex tasks that require lots of context, precision, or domain-specific knowledge. Oftentimes in these cases, AI tools will generate responses that are overly confident or wrong and are missing key information due to not being integrated with other systems or software we have,” said CEO Ying Sa.
Some, like top 25 firm Armanino, noted that these challenges mean that humans need to devote considerable time to ensuring the quality of AI outputs and intervening when the programs go off track.
“The primary disappointment stems from the occasional inaccuracies or biases inherent in AI-generated outputs, commonly referred to as ‘hallucinations,’ necessitating continuous human oversight to ensure reliability. Addressing these inconsistencies remains an ongoing challenge,” said Jim Nagata, senior director of cybersecurity and IT operations.
Top 25 firm Eisner Amper’s chief technology officer Sanjay Desai noted that these issues with accuracy and consistency can be found across AI solutions, though noted that the technology is still quite new and so many things are still in the process of being refined.
“The lows come from the gap between what’s possible and what works reliably in practice. We still need strong guardrails to define valid inputs and outputs, especially in sensitive use cases. Technologies like retrieval augmented generation (RAG) haven’t yet delivered the accuracy or consistency we need when working with proprietary or domain-specific data. Even in mature areas like audio-to-text transcription, we see issues—particularly with accurately identifying speakers in multi-person meetings, which affects the quality of recaps and follow-up actions. In short, while LLMs have come a long way, making them enterprise-ready still requires ongoing human oversight, thoughtful implementation, and continuous refinement,” said Desai.
Another issue reported by several firms was what firms like Navolio & Tallman saw as ongoing security risks from AI solutions that limits their ability to apply the technology to more sensitive use cases.
“The overall attention to security and privacy is still more limited than our industry requires, vendors have not yet aligned their pricing models with the impact their tools make to the business, and vendors still oversell their AI capabilities,” she said.
Top 25 firm Citrin Cooperman also noted–among other things–that the security of these solutions could stand to improve.
“The overall attention to security and privacy is still more limited than our industry requires, vendors have not yet aligned their pricing models with the impact their tools make to the business, and vendors still oversell their AI capabilities,” said chief information officer Kimberly Paul.
Another issue with AI that firms have reported is that solutions today don’t seem to integrate especially well with other programs, which limits the ability of these solutions to work across multiple systems in a single coherent workflow–under such conditions, AI solutions can wind up being siloed from the very areas it is needed the most.
“We believe one of the biggest gaps in current AI solutions is the inability to integrate into other AI solutions to work collectively across one process or workflow. There are many cases where one AI solution is very good at a specific task, while another is very good at another process or task, but the gap is the ability to integrate those solutions together to solve for an entirety of a process or a workflow,” said Brent McDaniel, chief digital officer for top 25 firm Aprio.
There is also the matter of data integration, which is needed for AI systems to gain a more holistic understanding of a firm’s needs. Without such integrations, AI becomes more limited in its ability to develop insights and provide actionable guidance, according to Tom Hasard, IT shareholder for New Jersey-based Wilken Gutenplan.
“We wish AI tools could fully synthesize all of our internal data and unique expertise—beyond the scope of general internet search—and provide detailed, context-specific answers for our team. In the near term, we envision an internal system that taps into our accumulated knowledge to assist staff in resolving complex client problems more quickly. Over time, this capability could be extended to give clients direct, on-demand access to our specialized insights, effectively scaling our expertise and delivering value in a more immediate and personalized way,” he said.
Beyond just data, lack of integration also limits the ability for AI to address complex problems due to lack of cross-disciplinary expertise, according to Kempke from Grant Thornton.
“Current AI solutions lack the deep cross-disciplinary expertise to be able to solve complex issues. AI today is optimized for specific fields and tasks but when it comes to solving problems that span multiple disciplines such as Tax, Legal and Finance, the current solutions are not yet capable of providing meaningful advice and guidance. Grant Thornton is already working with various AI partners on this issue and targets to be a very early adopter of the next iteration of AI that addresses this,” he said.
The AI wishlist
Many firms hoped that the next generation of AI solutions would address these sorts of problems in a way that will allow them to become true assistants capable of taking on complex tasks that require extensive judgment.
“We have found that AI currently lacks in the ability to replicate human creativity and complex decision-making. While AI excels at data analysis and task automation, it struggles with tasks requiring creativity and nuanced judgment. If AI could offer more sophisticated support in areas such as accounting and audit services, its value and impact in our daily lives would be significantly enhanced,” said Jim Meade, CEO of top 50 firm LBMC.
Desai, from Eisner Amper, also pointed out that AI isn’t very good at handling bad data, which is a problem considering that AIs run on data. This means that using AI effectively today still requires a great deal of data processing and sanitation to make information useful. If humans did not need to do so much manual cleanup to get data AI-ready, it would help make the technology even more efficient.
“One of the biggest gaps in AI today is its limited ability to handle bad data. Since data is the foundation of any AI strategy, it’s a challenge that most organizations still face— dealing with messy, inconsistent, or unstructured data. We wish AI could do more to identify, fix, and improve data quality automatically, instead of relying so much on manual cleanup,” said Desai.
Finally, Avani Desai, CEO of top 50 firm Schellman, said that AI needs to not only be safer, it needs to be visibly so, as trust and confidence in the technology is often key to adoption.
“I wish that AI could de-risk itself so that clients would be more open to using it and build client trust. If AI could more clearly demonstrate safety and responsible use, adoption would be much easier. Once people understand it’s here to help—and learn to use it responsibly—the fear will fade,” she said.
Representative Nicole Malliotakis said increasing the state and local tax deduction cap to $30,000 from $10,000 would reduce the tax burden of the vast majority of people in her district, indicating support for a proposal that is dividing Republicans.
“Every member needs to advocate for the particular needs of their district. Tripling the deduction to $30,000 will provide much-needed relief for the middle-class and cover 98% of the families in my district,” Malliotakis, a Republican representing Staten Island, New York and a member of the House tax committee, said in a statement to Bloomberg News on Friday.
Malliotakis’ nod of approval for a $30,000 SALT deduction cap comes as Republicans are fighting among themselves about how high to increase a tax break that has the potential to scuttle President Donald Trump’s entire tax package.
House Speaker Mike Johnson on Thursday said the $30,000 write-off limit is one of several options being discussed. That figure was rejected by several other New York Republicans, including Elise Stefanik, Nick LaLota, Mike Lawler and Andrew Garbarino. California’s Young Kim also rebuffed the idea.
Malliotakis’ district has less expensive property values and lower incomes than some of the other lawmakers pushing for a SALT expansion, making it politically viable for her to accept a lower cap than some of her colleagues.
White House Press Secretary Karoline Leavitt suggested on Friday that Trump would not weigh in on an appropriate level for a SALT cap, leaving it to lawmakers to resolve.
“There’s a lot of disagreement on Capitol Hill right now about the SALT tax proposal, and we will let them work it out,” she told reporters.
House Republicans’ narrow majority means that Johnson needs to win the support of nearly all his members to pass Trump’s tax-and-spending package.
Several of the SALT advocates have said that they are willing to block the bill unless there is a sufficient increase to the deduction. However, most members have not publicly stated how high the deduction must be to win their support.
The debate over SALT has proved to be a particularly thorny fight because it is a political priority for a small but vocal group of Republicans representing swing districts critical to the party maintaining a majority in the 2026 midterm elections.
Expanding the write-off is an expensive proposition, and Republicans have little fiscal wiggle room as they are sparring over ways — including cuts to Medicaid and levy hikes on millionaires — to offset the cost of the tax-cut package.
The House Ways and Means Committee is slated to consider the tax portion of the bill on Tuesday, including SALT changes.