--- title: 3 Steps For Battling Cyber Thieves In Your CPA Practice description: A Cost of a Data Breach Report found that the “average global cost of a data breach...was $3.92 million in 2019”. It’s more important than ever for CPAs to develop a data security plan to protect clients’ private information. It some cases having a plan is a matter of federal and state law. We offer 3 steps for battling cyber thieves in your CPA practice. image: https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1020.jpeg --- [Skip to the main content.](https://alura.valeonetworks.com/blog/3-steps-for-battling-cyber-thieves-in-your-cpa-practice#main-content) [![SN by VN (500 x 250 px)](https://alura.valeonetworks.com/hs-fs/hubfs/SN%20by%20VN%20(500%20x%20250%20px).png?width=500&height=175&name=SN%20by%20VN%20(500%20x%20250%20px).png "SN by VN (500 x 250 px)")](https://alura.valeonetworks.com) [![SN by VN (500 x 250 px)](https://alura.valeonetworks.com/hs-fs/hubfs/SN%20by%20VN%20(500%20x%20250%20px).png?width=500&height=175&name=SN%20by%20VN%20(500%20x%20250%20px).png "SN by VN (500 x 250 px)")](https://alura.valeonetworks.com) - [Our Services](https://www.valeonetworks.com/our-services/) - [Managed IT](https://www.valeonetworks.com/our-services/managed-it/) - [24/7 Helpdesk](https://www.valeonetworks.com/our-services/managed-it/24-7-helpdesk/) - [24/7 Network Monitoring](https://www.valeonetworks.com/our-services/managed-it/24-7-network-monitoring/) - [Backup & Disaster Recovery](https://www.valeonetworks.com/our-services/managed-it/backup-disaster-recovery/) - [IT Consulting](https://www.valeonetworks.com/our-services/managed-it/it-consulting/) - [Technology Business Reviews](https://www.valeonetworks.com/our-services/managed-it/technology-business-reviews/) - [Vendor Management](https://www.valeonetworks.com/our-services/managed-it/vendor-management/) - [Server Virtualization](https://www.valeonetworks.com/our-services/managed-it/server-virtualization/) - [Wi-Fi Management](https://www.valeonetworks.com/our-services/managed-it/wi-fi-management/) - [Cybersecurity](https://www.valeonetworks.com/our-services/cybersecurity/) - [Antivirus/Malware](https://www.valeonetworks.com/our-services/cybersecurity/antivirus-malware/) - [Network Security](https://www.valeonetworks.com/our-services/cybersecurity/network-security/) - [Vulnerability Testing](https://www.valeonetworks.com/our-services/cybersecurity/vulnerability-testing/) - [Penetration Testing](https://www.valeonetworks.com/our-services/cybersecurity/penetration-testing/) - [Cloud Solutions](https://www.valeonetworks.com/our-services/cloud-solutions/) - [Hosted Private Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-private-cloud/) - [Hybrid Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hybrid-cloud/) - [Public Cloud Vendors](https://www.valeonetworks.com/our-services/cloud-solutions/public-cloud-vendors/) - [Office 365 Migration](https://www.valeonetworks.com/our-services/cloud-solutions/office-365-migration/) - [Hosted VOIP Solutions](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-voip-solutions/) - [Industries](https://www.valeonetworks.com/industries/) - [Resources](https://www.valeonetworks.com/resources/) - [In The News](https://valeonetworks.com/in-the-news/) - [Blog](https://blog.valeonetworks.com) - [About](https://www.valeonetworks.com/about/) - [Our Story](https://www.valeonetworks.com/about/our-story/) - [Our Company](https://www.valeonetworks.com/about/our-company/) - [Partners](https://www.valeonetworks.com/about/partners/) - [Areas We Serve](https://www.valeonetworks.com/about/areas-we-serve/) - [Contact](https://www.valeonetworks.com/contact/) -  [215-721-1122](tel:215-721-1122) [Client Portal](https://portal.valeonetworks.com/) Toggle Menu Toggle Menu [215-721-1122](tel:215-721-1122) [Client Portal](https://portal.valeonetworks.com/) - [Our Services *Toggle Menu*](https://www.valeonetworks.com/our-services/) - [Managed IT *Toggle Menu*](https://www.valeonetworks.com/our-services/managed-it/) - [24/7 Helpdesk](https://www.valeonetworks.com/our-services/managed-it/24-7-helpdesk/) - [24/7 Network Monitoring](https://www.valeonetworks.com/our-services/managed-it/24-7-network-monitoring/) - [Backup & Disaster Recovery](https://www.valeonetworks.com/our-services/managed-it/backup-disaster-recovery/) - [IT Consulting](https://www.valeonetworks.com/our-services/managed-it/it-consulting/) - [Technology Business Reviews](https://www.valeonetworks.com/our-services/managed-it/technology-business-reviews/) - [Vendor Management](https://www.valeonetworks.com/our-services/managed-it/vendor-management/) - [Server Virtualization](https://www.valeonetworks.com/our-services/managed-it/server-virtualization/) - [Wi-Fi Management](https://www.valeonetworks.com/our-services/managed-it/wi-fi-management/) - [Cybersecurity *Toggle Menu*](https://www.valeonetworks.com/our-services/cybersecurity/) - [Antivirus/Malware](https://www.valeonetworks.com/our-services/cybersecurity/antivirus-malware/) - [Network Security](https://www.valeonetworks.com/our-services/cybersecurity/network-security/) - [Vulnerability Testing](https://www.valeonetworks.com/our-services/cybersecurity/vulnerability-testing/) - [Penetration Testing](https://www.valeonetworks.com/our-services/cybersecurity/penetration-testing/) - [Cloud Solutions *Toggle Menu*](https://www.valeonetworks.com/our-services/cloud-solutions/) - [Hosted Private Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-private-cloud/) - [Hybrid Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hybrid-cloud/) - [Public Cloud Vendors](https://www.valeonetworks.com/our-services/cloud-solutions/public-cloud-vendors/) - [Office 365 Migration](https://www.valeonetworks.com/our-services/cloud-solutions/office-365-migration/) - [Hosted VOIP Solutions](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-voip-solutions/) - [Industries](https://www.valeonetworks.com/industries/) - [Resources *Toggle Menu*](https://www.valeonetworks.com/resources/) - [In The News](https://valeonetworks.com/in-the-news/) - [Blog](https://blog.valeonetworks.com) - [About *Toggle Menu*](https://www.valeonetworks.com/about/) - [Our Story](https://www.valeonetworks.com/about/our-story/) - [Our Company](https://www.valeonetworks.com/about/our-company/) - [Partners](https://www.valeonetworks.com/about/partners/) - [Areas We Serve](https://www.valeonetworks.com/about/areas-we-serve/) - [Contact](https://www.valeonetworks.com/contact/) -  2 min read # 3 Steps For Battling Cyber Thieves In Your CPA Practice [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Nov 11, 2019, 12:00:00 AM [Cybersecurity](https://alura.valeonetworks.com/blog/tag/cybersecurity) [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) Cybersecurity is an issue that threatens every industry including CPA practices. A [Cost of a Data Breach Report](https://securityintelligence.com/posts/whats-new-in-the-2019-cost-of-a-data-breach-report/) found that the “average global cost of a data breach...was $3.92 million in 2019”. It’s more important than ever for CPAs to develop a data security plan to protect clients’ private information. It some cases having a plan is a matter of federal and state law. We offer 3 steps for battling cyber thieves in your CPA practice. ## **Why A Cybersecurity Plan Matters** As a CPA you handle a lot of sensitive client data. Information like social security numbers tax ID numbers bank account numbers and the like are prime targets of cybercriminals. In some cases the thieves can actually file fake tax forms and defraud your clients of their tax refunds. The Cost of a Data Breach Report found that the top 3 causes of data breaches in most enterprises are: 1. Malicious & criminal attacks (51%) 2. System failures & glitches (25%) 3. Human error or neglect (24%) Developing an information security plan is vital in order to shore up vulnerabilities and protect sensitive data. Here are three steps to take in creating an IT security plan. ### **Step 1: Update Antivirus Software** The most basic information security plan should start by using antivirus software or apps. Be sure to keep this software updated. It serves as your first line of defense. ### **Step 2: Educate and Train Your Employees** Many data breaches occur because of risky behaviors on the part of employees. Phishing schemes and emails that contain malware are popular tools of cyber thieves. These schemes are designed to steal data or invade networks when someone clicks on malicious links. Downloading illegal software or content and visiting unauthorized websites can also put your system at risk. To protect your data it’s important to train employees and establish cybersecurity protocols for them to follow. **Step 3: Comply with Federal and State Regulations** Federal law requires all CPA firms to create a written data security plan. Many states have laws that surpass federal statutes so make sure you are familiar with those regulations as well. The [Financial Services Modernization Act of 1999](https://www.federalreservehistory.org/essays/gramm_leach_bliley_act) set new guidelines for financial entities including CPAs. [FTC Safeguard Rules](https://www.ftc.gov/tips-advice/business-center/guidance/financial-institutions-customer-information-complying) state that professional tax preparers must enact information security plans in order to protect client data. **A data security plan template must include:** - Designating employees to coordinate an information security plan - [Identifying risks](https://www.alura.com/service/netaudit-overview) that affect client information - Evaluating the effectiveness of current cybersecurity measures - Designing & implementing safeguard programs - Monitoring & testing safeguard programs - [Selecting a service provider](https://www.alura.com/about.php) to maintain safeguards - Making adjustments to your IT security plan as needed  For complete regulations download “Protect Your Clients; Protect Yourself: Tax Security 101”. The report outlines guidelines as part of a [Security Summit awareness campaign](https://www.irs.gov/newsroom/protect-your-clients-protect-yourself-tax-security-101) in conjunction with the IRS. ## **Protect Your Clients Protect Your Business** It is vital for CPAs to develop a security plan in order to protect sensitive client data. Failing to do so can cost you millions. It can also lead to fines or legal action if you don’t comply with federal and state regulations. - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://alura.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! [![How to Avoid Healthcare Data Breaches With Data Encryption](https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1093.jpg)](https://alura.valeonetworks.com/blog/how-to-avoid-healthcare-data-breaches-with-data-encryption) #### [How to Avoid Healthcare Data Breaches With Data Encryption](https://alura.valeonetworks.com/blog/how-to-avoid-healthcare-data-breaches-with-data-encryption) [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Aug 9, 2021, 12:00:00 AM Reported in 2020 over 81% of the American population had data exposed through a healthcare data breach. If that number disturbs you it should. [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://alura.valeonetworks.com/blog/how-to-avoid-healthcare-data-breaches-with-data-encryption) [![Everything You Need to Know About Phishing Prevention](https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1016.jpg)](https://alura.valeonetworks.com/blog/everything-you-need-to-know-about-phishing-prevention) #### [Everything You Need to Know About Phishing Prevention](https://alura.valeonetworks.com/blog/everything-you-need-to-know-about-phishing-prevention) [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Oct 14, 2019, 12:00:00 AM Cyber attacks are one of the biggest threats facing businesses. It seems like every few weeks a major global company is hacked. [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://alura.valeonetworks.com/blog/everything-you-need-to-know-about-phishing-prevention) [![How to Prevent Data Breaches Within Your Business](https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1017.jpeg)](https://alura.valeonetworks.com/blog/how-to-prevent-data-breaches-within-your-business) #### [How to Prevent Data Breaches Within Your Business](https://alura.valeonetworks.com/blog/how-to-prevent-data-breaches-within-your-business) [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Oct 21, 2019, 12:00:00 AM The average cost a business in the United States will suffer due to a data breach is $7.91 million. [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://alura.valeonetworks.com/blog/how-to-prevent-data-breaches-within-your-business) ![ALL-ALURA_A Valeo Networks_Horizontal-white text](https://alura.valeonetworks.com/hs-fs/hubfs/ALL-ALURA_A%20Valeo%20Networks_Horizontal-white%20text.png?width=1695&height=401&name=ALL-ALURA_A%20Valeo%20Networks_Horizontal-white%20text.png)   ##### About About With cutting-edge technology and quality customer service, you’ll find everything you need to help your company soar with Alura. ##### Explore Alura Explore Alura - [Our Services](https://alura.valeonetworks.com/our-services) - [Industries](https://alura.valeonetworks.com/industries/) - [Resources](https://alura.valeonetworks.com/resources/) - [About](https://alura.valeonetworks.com/about/) - [Contact](https://alura.valeonetworks.com/contact/) ##### Contact Contact [200 Barr Harbor Dr
Suite](https://www.google.com/maps/place/Alura+Business+Solutions/@40.128931,-75.298774,17z/data=!4m15!1m8!3m7!1s0x89c6bdadb8d4e4f7:0x83d390b49b5df01b!2s1000+Germantown+Pike+Ste+C4,+Plymouth+Meeting,+PA+19462!3b1!8m2!3d40.128931!4d-75.298774!16s%2Fg%2F11txj0w8kj!3m5!1s0x89c6bdadbc297c5f:0x2dce076bc30a9418!8m2!3d40.1288817!4d-75.2985614!16s%2Fg%2F1tcv2djr?entry=ttu) [400](https://www.google.com/maps/place/Alura+Business+Solutions/@40.128931,-75.298774,17z/data=!4m15!1m8!3m7!1s0x89c6bdadb8d4e4f7:0x83d390b49b5df01b!2s1000+Germantown+Pike+Ste+C4,+Plymouth+Meeting,+PA+19462!3b1!8m2!3d40.128931!4d-75.298774!16s%2Fg%2F11txj0w8kj!3m5!1s0x89c6bdadbc297c5f:0x2dce076bc30a9418!8m2!3d40.1288817!4d-75.2985614!16s%2Fg%2F1tcv2djr?entry=ttu)[Conshohocken, PA 19428](https://www.google.com/maps/place/Alura+Business+Solutions/@40.128931,-75.298774,17z/data=!4m15!1m8!3m7!1s0x89c6bdadb8d4e4f7:0x83d390b49b5df01b!2s1000+Germantown+Pike+Ste+C4,+Plymouth+Meeting,+PA+19462!3b1!8m2!3d40.128931!4d-75.298774!16s%2Fg%2F11txj0w8kj!3m5!1s0x89c6bdadbc297c5f:0x2dce076bc30a9418!8m2!3d40.1288817!4d-75.2985614!16s%2Fg%2F1tcv2djr?entry=ttu) [215-721-1122](tel:215-721-1122) Business Hours: M-F: 8AM-9PM - [Privacy Policy](https://alura.valeonetworks.com/privacy-policy/) © 2026 Alura [*Facebook*](https://www.facebook.com/alurasolutions/)[*Twitter*](https://twitter.com/AluraSolutions)[*LinkedIn*](https://www.linkedin.com/company/alura-business-solutions/) [![Alura White logo](https://alura.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Alura%20White%20logo.png?width=295&height=115&name=Alura%20White%20logo.png)](https://alura.valeonetworks.com/) [![Next.I.T._White-Logo](https://alura.valeonetworks.com/hs-fs/hubfs/Next.I.T._White-Logo.png?width=328&height=136&name=Next.I.T._White-Logo.png)](https://next-it.net/) [![White-OTT-Logo-1-768x253](https://alura.valeonetworks.com/hs-fs/hubfs/White-OTT-Logo-1-768x253.png?width=313&height=103&name=White-OTT-Logo-1-768x253.png)](https://www.ontimetech.com/) [![Valeo-Logo-White (1)](https://alura.valeonetworks.com/hs-fs/hubfs/Valeo-Logo-White%20(1).png?width=288&height=123&name=Valeo-Logo-White%20(1).png)](https://valeonetworks.com/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mindy Gallagher", "url" : "https://alura.valeonetworks.com/blog/author/mindy-gallagher" }, "dateModified" : "2023-09-27T13:26:17.373Z", "datePublished" : "2019-11-11T05:00:00.000Z", "headline" : "3 Steps For Battling Cyber Thieves In Your CPA Practice", "image" : [ "https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1020.jpeg" ], "mainEntityOfPage" : { "@id" : "https://alura.valeonetworks.com/blog/3-steps-for-battling-cyber-thieves-in-your-cpa-practice", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://alura.valeonetworks.com/hubfs/VN%20-%20Division%20Logos/Alur/ALL-ALURA_A%20Valeo%20Networks_Horizontal-black%20text.png" }, "name" : "Valeo Networks" } } ```