Industries / CPA and tax
CPA firm IT support built around tax season and the Safeguards Rule.
Accounting firms hold exactly what criminals want: tax returns, Social Security numbers and bank details, gathered into a short, high-pressure season. The FTC Safeguards Rule and IRS guidance expect a written security plan and specific controls. We put those in place and keep the firm running through April.
Home / Industries / CPA and Tax Firms
What is different
Tax season is the threat season
Tax preparers are covered by the FTC Safeguards Rule, which requires a written information security program, a qualified individual responsible for it, MFA, encryption, monitoring and notification of certain security events to the FTC. The IRS publishes guidance and a sample written information security plan for tax professionals.
We implement the technical controls, help you maintain the written plan and keep the evidence. Before each season we review accounts, MFA, backups and remote access, so the busy months are spent on clients, not on IT problems.
What we run
The systems, and how we look after them
| Area | What we do |
|---|---|
| Tax and accounting software | Workstation and server setup, updates scheduled outside deadlines, vendor coordination |
| Client portals | Secure file exchange instead of email attachments, with access reviews |
| Remote work | MFA everywhere, managed laptops and secure access for seasonal staff |
| Phishing and impersonation protection, verify-by-phone rule for payment and refund changes | |
| Safeguards Rule | Technical controls, written plan support and an evidence pack |
| Seasonal staff | Fast, documented onboarding and same-day removal at season end |
Recommended plan
Regulated Office
Most CPA and tax firms fit Regulated Office, because the written plan and evidence are part of the requirement, not an extra.
FAQ
Frequently asked questions
Does the Safeguards Rule apply to small tax practices?
The FTC treats tax preparers as financial institutions under the rule. Some provisions are relaxed for firms with fewer than 5,000 customers, but core safeguards still apply. Your legal adviser can confirm your specific position.
Can you help us write our WISP?
Yes. We help draft and maintain the written information security plan using IRS and FTC guidance, and we document the technical safeguards it describes.
Can you avoid changes during tax season?
Yes. We schedule major changes outside your deadlines and keep a freeze period agreed with you.
Do you support seasonal staff?
Yes, with a checklist for fast setup and complete removal at the end of the season.
Next step
Book an IT assessment
Tell us how many preparers and staff you have, including seasonal, and which tax software you use. We reply within one business day.