CPA Firms · San Diego County
Free Cybersecurity Checklist for San Diego CPA Firms
Bayotech is a San Diego managed IT and cybersecurity company that has protected local professional firms since 2006. This free checklist helps CPA and accounting firms check the controls that stop most real-world attacks, so you can see what's covered and where the gaps are.
Prefer to talk it through? Ask for a free 30-minute security check. Average first response: 4.5 minutes.
Get the Checklist by Email
Free PDF, sent to your inbox.
Check your inbox!
We’ve emailed you the CPA Firms cybersecurity checklist (a PDF). If it isn’t there in a few minutes, check your spam or junk folder.
Want us to go through it with you? Call 619-717-8071 for a free 30-minute security check.
A practical guide from Bayotech, protecting San Diego professional firms since 2006.
What the Law Requires
Tax and accounting firms hold Social Security numbers, bank accounts and complete financial pictures for every client. That makes them a top target for identity thieves filing fraudulent returns, and for criminals who hijack email to redirect payments. This checklist covers what the law requires and the controls that stop most real attacks.
- The FTC Safeguards Rule applies to you. Under the Gramm-Leach-Bliley Act, tax preparers count as financial institutions. The rule requires a written security program, a named person in charge, a risk assessment, MFA, encryption and staff training.
- You must have a Written Information Security Plan (WISP). IRS Publication 5708 provides a template, and renewing your PTIN confirms you know this obligation.
- Some breaches must be reported to the FTC within 30 days: those involving unencrypted information for 500 or more people.
- Report data theft to your IRS Stakeholder Liaison right away so fraudulent returns can be stopped. California law also requires notifying affected clients.
What’s inside
What the CPA Firms Checklist Covers
25 yes/no checks in 6 sections, written in plain English. Tick each box on screen or print the PDF.
- 1. Your Written Plan and Responsible Person (4 checks)
- 2. Accounts and Access (4 checks)
- 3. Email, Portals and Payments (4 checks)
- 4. Encryption and Devices (5 checks)
- 5. Backups and Records (4 checks)
- 6. People and Monitoring (4 checks)
More about how we help: IT support for San Diego CPA and accounting firms and our cybersecurity services.
Want a second pair of eyes on it?
Call for a free 30-minute security check: month-to-month, no onboarding fees, phones answered 24/7.
Client reviews
What San Diego CPA and accounting firms say
From our clients’ five-star Google reviews of Bayotech on Google Maps (opens in a new tab).
We recently switched to Bayotech from another larger IT company, and we could not be happier.
Highly recommend going with Bayotech for your IT needs. 10/10.
FAQ
Questions about the checklist
How do I get the CPA and accounting firms cybersecurity checklist?
Enter your name, email and company above and we email it to you as a PDF straight away. It’s free, and we don’t add you to a mailing list.
What’s included in the free 30-minute security check?
A quick review of your email security and multi-factor sign-in, a check that your backups are running and recoverable, and a dark web scan for leaked company passwords. We explain the results in plain English, with no obligation.
Can Bayotech go through the checklist with us?
Yes. Call 619-717-8071 and we’ll walk through it with you in a free 30-minute security check, with no obligation.
Free consultation
Book your free 30-minute security check
Tell us a little about your firm and we'll get back to you to set up a time. No pressure, no jargon.
- Month-to-month, no onboarding fees
- Phones answered 24/7
- Serving San Diego since 2006
Book your free 30-minute security check
We’ll get back to you within 15 minutes. Prefer to talk now? Call 619-717-8071.
Thank you!
We’ve got your message. We’ll get back to you within 15 minutes.
Prefer to talk now? Call 619-717-8071.