AI Policies for Accounting Firms: What to Do When Staff Share Client Data
An AI policy for accounting firms should say which tools staff may use, what information they may enter,…
MFA for Tax Firms: Choosing Phishing-Resistant Authentication
Multi-factor authentication requires different types of authentication factors. A password followed by another password is not MFA. For…
Section 7216 Consent Requirements for Tax Preparers
Section 7216 restricts a tax return preparer’s disclosure or use of tax return information. If the law or…
Breach Tabletop Exercises for Tax and Accounting Firms
A breach tabletop exercise is a discussion of how your firm would handle a realistic security incident. It…
Email vs Client Portals for Sharing Tax Documents
Email can protect tax documents when the right controls are configured, but an ordinary attachment creates copies the…
Verito Ranks #1 in 22 G2 Reports This Fall. Here’s What Firm Owners Said
Three months ago we wrote about ranking #1 in 21 G2 reports. G2 just published its Fall 2026…
What Do Fake EFIN and e-Services Phishing Emails Look Like?
Phishing emails impersonating the IRS are a constant, evolving threat for tax preparers, not a problem that shows…
Does PTIN Renewal Require a Written Information Security Plan?
Paid tax preparers must create and maintain a written information security plan (WISP). PTIN renewal includes an acknowledgment…
Is Your Server Ready for the 2027 Tax Software Releases?
Run a five-point check between October and December: operating system against the vendor sheet, RAM headroom at your…
What Does Section 7216 Require Before a Tax Firm Uses Offshore Staff?
Internal Revenue Code Section 7216 requires a tax return preparer to get the client’s signed consent before disclosing…
Does California’s SB 122 SaaS Tax Apply to Tax Software and Hosting?
Under BDO’s analysis of California’s SB 122, sales and use tax reaches digital prewritten software, including SaaS, starting…