Contact Support

If you are an existing client to get support call us on:

+44 (0)1483 412 042

OR

Login to the portal

Support portal

If you've been given a 6-digit support code

click here

Not an existing customer?

Contact us

Cyber Security Guide: How Accounting Firms Should Anticipate Risks

Accounting firms hold special categories of data, and a lot of valuable data at that. With many security breaches (67%) happening due to user error, cybercrime has never posed a greater threat.

Professional accountants, and accounting firms, often store, manage, and oversee valuable financial data. They are key individuals entrusted with potentially sensitive business data. As this kind of information passes their desk often, whether requested by a client or for simple admin, these professionals need to take extra precautions.
Accounting is a very sensitive industry, open to cyber-attacks. So, how can accountants protect themselves?

Be risk aware

Much like physical risks, a cybersecurity risk assessment should be carried out to help understand where your risks are.

This may seem daunting, or even complicated, but it is a valuable exercise and a strong starting point for identifying areas of risk. Weaknesses are not always where you think, which is why we’ve created an IT health assessment to help identify areas of your security to strengthen.

Conducting a self-risk-assessment will equip you with the essential knowledge of where your risks are, and how you can control them. Some risks, like outdated computers, can be easily fixed; whereas other risks, such as human errors, are harder to control without training and sharing the right knowledge.

Cybersecurity concerns for accountants

As accountants store sensitive and valuable data, there are many security concerns. These could include:

1. Databases getting sold on the dark web
2. Customers receiving emails pretending to be legitimate and from an accounting firm
3. Unwanted or unauthorised access to systems
4. Data being locked behind a ransomware paywall
5. A bug hiding in a system for a long time, allowing for malicious data collection

Whilst the list of cyber-related risks and threats are becoming even more sophisticated, anything that compromises the integrity of the service that you provide is a risk that needs addressing. But what can you do to ensure you keep your employees and customers safe?

Protecting accounting firms from risks

There are some basic procedures you can put in place to assist in your steps to becoming cybersecure.

1. Regularly train your staff

As mentioned, 67% of breaches and hacks are due to human error or a password being compromised. Educating your team regularly on the different (and changing) aspects of cybersecurity is critical. This training should include advice on how employees can ensure safety when online or handling sensitive data.

Accountants should consider the following areas for cybersecurity:

– Good password health, and avoiding using the same password for multiple accounts (which is called ‘daisy chaining’)
– Storing passwords in unsecure places, such as in web browsers
– Avoid using unsecured networks for work, such as coffee shops

2. Keep systems up to date

Ensure all computers are up to date, especially operating systems and any software updates or patches. In 2017, two separate attacks exposed billions of details across various industries by hacking older versions of Windows that no longer received security updates.

Regularly applying security updates, including patches, is a small and convenient step that accounting firms can take to ensure greater security and protection against risk varieties. This means evaluating what software is being run by your computers, especially if any are taken off-site, and ensuring that software is patched.

3. Manage levels of access

In a busy office environment, such as an accounting firm, giving all staff the ability to access data is a vulnerability. For example, admin staff may not need to see more confidential data such as financial statements. You should actively manage access to different kinds of data, ensuring that there’s a reasonable chain of authority.
Regulating access levels, like setting up file permissions, can help to isolate any potential breaches and risks.

4.  Setting up multi factor authentication

By having more than one step to login to software, you can prevent potential hackers and other malicious users. This can be achieved via an authentication app on your phone, using a mobile phone number to get a temporary access code or having to use a USB stick as a ‘key’. With its extra layers of security, this is known as ‘multi-factor’ authentication.

The more steps and alternative ways there are to access an account the better for your security.

 

ramsac can help you change the way your business thinks about cybersecurity. Speak to us today about how we can help your accounting firm stay secure.

Receive our FREE bespoke IT health assessment

Start
Registration No. 26980136
Terms and Conditions | Privacy Notice
GBH Law
GBH Law
11:29 22 May 20
Changing IT support providers, like changing lawyers, is not a decision any business takes lightly or frequently. The decision is fraught with numerous questions such as whether the new team will understand my business needs, will it cause teething problems, and more importantly, will the reality match the sales pitch! We took that decision to move to Ramsac in January after ten years with another provider and we have not regretted that choice for a moment. Ramsac are simply great! From the get go we have been very well supported from the front line very helpful telephone support team right up to our relationship manager. We feel that the Ramsac team are very much an integral part of us . What however has driven us to write this review is the fabulous support we have received following a cyber attack this week. Something no business wants to happen but is increasingly a sad factor of modern cyber life. The Ramsac cyber support team were superb and really gave us first class support and guidance through what was frankly a horrible experience. Thank you Dan! Denise Herrington
The HR Services Partnership
The HR Services Partnership
17:59 16 Jan 20
We have worked with Ramsac since 2015. They offer a truly winning formula. We have been delighted by their support at all three levels: our network consultant (Colin) understands our set up and is great when we need to upgrade our infrastructure; we have ready access to our account manager who has been great with supporting our growth; and the helpdesk is always so patient for the day-to-day glitches. Very professional and supportive – thank you team ramsac!
Zoe Brooks
Zoe Brooks
13:02 16 Jan 20
Sam on the support desk is extremely knowledgeable and helpful. Every time I have rung with an issue and she has helped the problem has always been rectified smoothly and quickly!
Sarah-Jane Calloway
Sarah-Jane Calloway
16:02 06 Jan 20
Ed spent two days with us following an office reshuffle. He worked to a very high standard and was very helpful, courteous and happy to sort out anything we asked of him!
Luke Hoey
Luke Hoey
14:20 07 Nov 19
Always very helpful and will work hard to resolve any issues you have.
Richard Renson
Richard Renson
16:54 10 Dec 18
Great, helpful IT Kings and Queens
Andrew Worth
Andrew Worth
12:37 30 Aug 18
fine bunch
Colin Warner
Colin Warner
08:46 06 Dec 17
Excellent managed service provider.
Selom B
Selom B
11:58 10 Dec 16
First Class!! Responsive, knowledgeable, professional and very easy to work with - Ramsac have been a fantastic strategic IT partner for the last few years and I'm sure will continue to be for many years going forward. I would highly recommend them!
Ian Windle - Inspiring Leadership
Ian Windle - Inspiring Leadership
08:53 04 Jul 16
Great IT business, with a powerful management team. Could not recommend them more highly.
Patrick O'Luanaigh
Patrick O'Luanaigh
10:55 01 Jul 16
A truly fantastic IT support company - I can't speak highly enough about them.
Sarah Whitemore
Sarah Whitemore
11:59 20 Jun 16
I have known Dan May and Ramsac for 5 or 6 years now. Dan is such a great guy and really helpful with strategic advice and input on all things IT. He's so approachable and doesn't baffle you with IT jargon. If you are looking to outsource your IT or you have a problem you need help with Dan is definitely the one to ask.
Jonathan Richards
Jonathan Richards
12:14 31 May 16
I've worked with Ramsac for many years and whole heartedly recommend their services. They are always professional, approachable and have the rare skill of making IT understandable. Their can do attitude leaves you feeling that you are in safe hands.
See All Reviews
© 2021 ramsac. All rights reserved.