Connect with us

Accounting

Cybersecurity best practices as 2025 tax season kicks off

Published

on

Every year during tax season, finance professionals handle an influx of sensitive financial and personal information passed along by their clients. Although most CPAs and accountants excel at processing this information, as well as other data related to their field, they’re typically not experts in cybersecurity.

As our technology-driven world grows increasingly complex and evolves more rapidly over time, the more important it becomes for financial institutions to take precautions that safeguard their clients’ sensitive information (and also their own). Bad actors are always working to get a step ahead of protection tech and services, and take advantage of the habits of employees who may not be aware of the latest cyber threats.

The best CPAs and accountants tend to be naturally inquisitive, perhaps to the point of skepticism — and their clients should thank them for it. Because when it comes to finances or cybersecurity, speaking as someone with professional experience in both spaces, those characteristics are superpowers. As cyberattacks become increasingly frequent and sophisticated, financial professionals should be encouraged to maintain a healthy dose of suspicion and lean into hypervigilance. From small accounting operations to large, enterprise-level firms, organizations and their employees must understand and embrace the importance of cybersecurity and its best practices.

Tax season is busy and a potential cybersecurity weakness

It’s critical for financial organizations to observe and maintain cybersecurity best practices, even (and perhaps especially) during tax season. Increased workloads during the busy season may push cybersecurity and network infrastructure down the list of priorities, but bad actors often look for such openings to exploit.

CPAs handle an influx of sensitive financial information and personal information during tax season, which could make them a more attractive target for cybercriminals. Failing to strengthen and maintain cybersecurity technology and protocols could lead to even more chaos and stress during what can already be a nerve-wracking time of year for the industry.

Building client and firm cybersecurity protocols

There is no one-size-fits-all approach to cybersecurity and instituting best-practice protocols, but one of the best methods in the financial services space is to separate cybersecurity into a two-pronged issue: client information and firm information.

Because clients — like CPAs — are rarely cybersecurity experts themselves and, in fact, often operate under the expectation that a financial firm has the proper tools and protocols in place to protect their information, it’s vitally important that nothing be taken for granted on this side.

Key areas of focus for client information

  • Email: Email is inherently insecure for the exchange of sensitive financial documents. Once an email is sent, a firm has little to no control over where it ends up — possibly forwarded, intercepted or left in an insecure inbox. Email is also a primary attack vector for phishing. Clients might accidentally open malicious attachments or click on links in phishing emails disguised as legitimate requests. It can be clunky, too, as some email providers block certain file types that could be necessary for tax preparation, and size limits may prompt clients to use insecure methods, such as unencrypted file-sharing services or breaking files into multiple emails — a significant data security risk.
  • Secure portal: The best antidote to publicly available email is a secure portal. A private, secure portal provides a financial firm with a controlled, encrypted environment for file sharing, minimizing the risk of breaches. Encryption protects data in transit and at rest, and access controls allow a firm to decide who gets access to which files and set permissions (view, download or edit) for further guardrails. Additionally, portals often log activity and provide an audit trail of who has accessed and modified files.
  • Guest Wi-Fi networks: Guest networks are essential for accountants and CPAs in order to protect client data and their own systems. Strong passwords, encryption and network segmentation are crucial components of a secure Wi-Fi network. For extra layers of security, consider hiding your guest network’s SSID (network name), restricting guest network access to internet-only (blocking access printers and file shares) and creating a separate access point, further segregating it from your main network.

Internally, protecting firm information requires a multilayered approach that encompasses technology, policies and ongoing employee training. Strong access controls, encryption and data backups are fundamental security measures, but accounting firms should also partner with cybersecurity experts to create a comprehensive security program that accounts for employee awareness training and builds a strong security culture.

Key areas of focus for firm information

  • Device security: All company devices and storage media, including hard drives and USB drives, should be encrypted to prevent data loss and theft. Install robust endpoint security software (antivirus, anti-malware and intrusion detection) on all company devices that access firm networks and client data. Implement mobile device management solutions to secure company-issued mobile devices and enforce security policies.
  • Data security: Firms should use data loss prevention tools to prevent sensitive data from leaving the network without authorization. Secure file-sharing platforms and encrypted email for internal and external communication protect sensitive data. Meanwhile, a comprehensive data backup and recovery plan helps ensure business continuity in the case of adverse events such as a ransomware attack or even a natural disaster.
  • Employee training and awareness: In addition to new employee training, regular security awareness training for all employees should be conducted to educate a firm’s workforce about cybersecurity threats, company security policies and best practices (including recognizing phishing emails and following strong password habits). Run simulated phishing attacks to test employee awareness and reinforce their training, and develop and regularly practice an incident response plan so that, if all else fails, employees know how to react in case of a security incident. This can significantly mitigate lost time, revenue and reputational impact in the event of a cyber attack.
  • Physical security: Implement physical security measures to protect office space and equipment, including old-school and analog methods. That may include security cameras, visitor logs and physical locks that limit access to control systems. Be sure to shred and securely dispose of sensitive documents to prevent data breaches.

Cyber attacks, no matter the time of year, can have significant financial and reputational costs. Organizations that lack the time or resources to bolster or sustain their cybersecurity and network infrastructures — again, especially during the upcoming busy season — should consider partnering with external cybersecurity specialists to ensure their clients’ personal information and network security stay protected. As always, better safe — and secure — than sorry.

Continue Reading

Accounting

Instead adds AI-driven tax reports

Published

on

Tax management platform Instead launched artificial intelligence-driven tax reports, harnessing AI to analyze full tax returns to glean tax strategies and missed opportunities.

The San Francisco-based company’s reports, which are designed for clarity and compliance, include:

  • Tax Return Analysis Report, which reveals tax-saving opportunities in tax returns for individuals (1040) and businesses (Schedule C, E, F, 1120, 1120S, 1065).
  • Tax Plan Report, which provides a real-time summary and action list of all tax strategies across all entities in a tax year and includes potential and actual savings, summaries for each tax strategy, and IRS and court case references.
  • Tax Strategy Reports for every tax strategy, with detailed calculations of deductions and credits, supporting documentation, and an actionable plan.

Instead users can collaborate with their tax professionals on the platform or search the Instead directory of firms that support the platform and offer tax planning and advisory services. 

Andrew Argue

Andrew Argue

“We are excited to bring our users the future of smart, effective decisions when it comes to filing taxes,” said Andrew Argue, co-founder of Instead, in a statement. “With Instead, users can easily uncover and implement tax strategies and opportunities that will save them money and have the transparent calculations to support a tax return. And this is just the beginning…we have some exciting things on our roadmap and look forward to sharing them very soon!”

Continue Reading

Accounting

Half of accountants expect firms to shrink headcount by 20%

Published

on

Fifty-two percent of accountants expect their firms to shrink in headcount by 20% in the next five years, according to a new report.

The Indiana CPA Society, in collaboration with CPA Crossings, released today a 2025 Workforce Transformation report. Paradoxically, while it found that most respondents anticipate their firms to reduce headcount, 75% said that their firms will need the same amount or more staff to meet future client demand. 

Sixty percent of respondents said that entry-level professionals are the role they anticipate needing fewer employees in the future due to automation. Nearly half as many responded saying experienced professionals (approximately 33%) and manager-level roles (approximately 25%). 

The report highlights the weaknesses of the pyramid-shaped practice structure that is the basis for most firm’s current talent management and workforce development systems. One challenge is the pyramid’s low retention design. 

“The pyramid practice structure was not designed to retain staff. It actually does the opposite. Upward mobility is statistically difficult to attain,” the report reads. “Firms have a lot of requirements for entry-level staff, but there is a lot less need for experienced staff. Firms eventually have a lot of entry-level professionals qualified to become experienced staff but only a few openings. It only gets more difficult as staff try to move from experienced staff to managers. For those who want to move from managers to owners, the wait could be 15 years or more — or maybe never.”

The report discussed the dwindling pipeline of incoming talent, saying, “Currently, there are not enough qualified staff to maintain a bottom layer that is wide enough,” and generational preferences, saying, “Gen Zers are looking for meaning and emotional connection. If they cannot find these connections in their work, it won’t take much for them to decide to move on.”

The final weakness of the pyramid model the report highlighted was advances in technology, particularly automation and artificial intelligence. 

“Advances in technology, especially with automation and artificial intelligence, could obliterate the work being done by the bottom of the pyramid,” the report reads. “This impact is beginning to be seen in accounting firms across the country as manual and time-consuming data entry and reconciliation tasks, once assigned to entry-level staff, are being automated. Firms are already seeing great benefits from this transfer, such as faster and more accurate data processing.”

The report suggests that firms take on a new practice structure that focuses on precision hiring, proactive retention, practical technology implementation, pricing expertise, practice area expansion or focus, and people acceleration. 

Continue Reading

Accounting

Senate Republicans plan major revisions to Trump tax bill

Published

on

The U.S. Capitol

Senate Republicans intend to propose revised tax and health-care provisions to President Donald Trump’s $3 trillion signature economic package this week, shrugging off condemnations of the legislation by Elon Musk as they rush to enact it before July 4. 

The Senate Finance Committee’s plan to extract savings from the Medicaid and — perhaps — Medicare health insurance programs could depart in key respects from the version of the giant bill that narrowly passed the US House in May. The release of the panel’s draft will likely touch off a new round of wrangling between fiscal conservatives and moderates. 

As the debate unfolds, businesses in the energy, health care, manufacturing and financial services industries will be watching closely.  

SALT dilemma

A crucial decision for Majority Leader John Thune, Committee Chairman Mike Crapo and other panel members will be how to handle the $40,000 limit on state and local tax deductions that was crucial to passage of the bill in the House. 

Senate Republicans want to scale back the $350 billion cost of increasing the cap from $10,000 to $40,000 for those making less than $500,000.   

House Speaker Mike Johnson and a group of Republican members from high-tax states have warned that any diminishing of the SALT cap would doom the measure when it comes back to the House for a final vote. At the same time, so-called pass-through businesses in the service sector are pushing to remove a provision in the House bill that limits their ability to claim SALT deductions. 

(Read more:What the House gave the Senate: Inside the ‘Big Beautiful’ bill.“)

The Senate Finance Committee is widely expected to propose extending three business tax breaks that expire after 2029 in the House version to order to make them permanent. They are the research and development deduction, the ability to use depreciation and amortization as the basis for interest expensing and 100% bonus depreciation of certain property, including most machinery and factories.  

Manufacturers and banks are particularly eager to see all of them extended. 

To pay for the items, which most economists rank as the most pro-growth in the overall tax bill, senators may restrict temporary breaks on tips and overtime, which Trump campaigned on during last year’s election in appeals to restaurant and hospitality workers. The White House wants to keep those provisions as is.

White House economic adviser Kevin Hassett said Trump “supports changing” the SALT deduction and it’s up to lawmakers to reach a consensus.

“It’s a horse trading issue with the Senate and the House,” Hassett said Sunday on CBS’s Face the Nation. “The one thing we need and the president wants is a bill that passes, and passes on the Fourth of July.”

The committee will also face tough decisions on green energy tax credits. Scaling those back generates nearly $600 billion in savings in the House bill. 

On Friday, rival House factions released dueling statements. 

The conservative House Freedom Caucus warned that any move to restore some of the credits would prompt its members to vote against the bill. “We want to be crystal clear: If the Senate attempts to water down, strip out, or walk back the hard-fought spending reductions and IRA Green New Scam rollbacks achieved in this legislation, we will not accept it,” the group said. 

In contrast, a group of 13 Republican moderates, led by Pennsylvania’s Brian Fitzpatrick and Virginia’s Jen Kiggans, urged senators to make changes that would benefit renewable energy projects, many in Republican districts, that came about through President Joe Biden’s Inflation Reduction Act. 

(Listen:The state of the ‘Big Beautiful Bill’ and more.“)

“We remain deeply concerned by several provisions, including those which would abruptly terminate several credits just 60 days after enactment for projects that have not yet begun construction,” the lawmakers said in a letter to the Senate. 

Banks are especially interested to ensure that tax credits on their balance sheets as part of renewable energy financing aren’t rendered worthless by the bill. 

Health-care perils

Medicaid and Medicare cuts present the most daunting challenge in the committee’s draft. While Republicans are generally in favor of new work requirements for able-bodied adults to be insured by Medicaid, some moderates like Senator Lisa Murkowski of Alaska have expressed concern over giving states just a year and a half to implement the requirement.  

Senator Lisa Murkowski House provisions instituting new co-pays for Medicaid recipients and limits on the ability of states to tax Medicaid providers in order to increase federal reimbursement payments are more disputed. 

Senators Josh Hawley of Missouri and Jim Justice of West Virginia have said they oppose these changes.  

To find savings to make up for removing these provisions, Republicans said last week that they are examining whether to put new restrictions on billing practices in Medicare Advantage. Large health insurers that provide those plans would be most affected by such changes. 

Yet overall, GOP leaders say the tax bill remains on schedule and they expect much of the House bill to remain intact. 

The Senate’s rules-keeper is in the process of deciding whether some provisions are not primarily fiscal in nature. Provisions that restrict state regulations on artificial intelligence, ending some gun regulations and putting new limits on federal courts are seen as most vulnerable to being stripped under Senate budget rules. 

Lawmakers are largely taking their cues from Trump and sticking by the $3 trillion bill at the center of the White House’s economic agenda. 

Musk, the biggest political donor of the 2024 campaign, has threatened to help defeat anyone who votes for the legislation, but lawmakers seem to agree that staying in the president’s good graces is the safer path to political survival.

“We are already pretty far down the trail,” Thune told reporters on Thursday afternoon as his colleagues left for the weekend.

Continue Reading

Trending