Cybersecurity for the firms identity thieves target first
Tax and accounting firms are one of the most targeted small business groups in the country, because one compromised preparer can expose hundreds of identities and file fraudulent returns at scale.
Our security stack is the same one we would put in front of a bank, priced and sized for an office of five or twenty-five. Every control maps to the IRS Security Six and to the FTC Safeguards Rule, so it shows up in your written security plan.
What is included
Every item below is part of the service, documented, and shows up on your monthly report where it applies.
- Managed endpoint detection and response with a 24/7 security operations center
- Email security that catches impersonation, malicious links and fake invoice requests
- Multi-factor authentication on email, tax software, remote access and the portal
- Managed firewall and VPN, monitored and kept current
- Disk encryption on every laptop and workstation
- Security awareness training and simulated phishing for staff
- Evidence of each control, ready for your WISP, your insurer or an IRS inquiry
Why it is different for an accounting firm
Built around the IRS Security Six
Antivirus, firewall, MFA, backups, drive encryption and a VPN. IRS Publication 4557 lists them as baseline protections for every tax professional. We deploy all six and keep proof that they are running.
Ready for the insurance questionnaire
Cyber insurance applications ask about MFA, EDR, backups and training. We help you answer accurately, which protects the claim if you ever need it.
Compliance handled by our sister firm
When you need the written plan itself, Sunesis Services builds, runs and proves the WISP. Help Desk NW runs the technology underneath it.
Sunesis Services builds, runs and proves your WISP
Help Desk NW runs the technology. Our sister firm Sunesis Services writes and maintains the Written Information Security Plan the IRS and the FTC require, with a fixed-price WISP and Security Six Diagnostic.
Questions firms ask us
Is antivirus enough?
Not anymore. Modern attacks use stolen passwords and legitimate tools that antivirus does not flag. Endpoint detection and response watches behavior, and a security operations center can isolate a machine at 2 a.m.
How much does security cost per computer?
Our security stack runs between $70 and $95 per endpoint per month depending on which layers you need, plus a managed firewall retainer. See the pricing page for details.
What happens if we do get hit?
You call us first. We contain the affected machines, preserve evidence, help you notify your IRS Stakeholder Liaison and your insurer, and restore from verified backups.
Start with a conversation, not a contract
Tell us how your firm handles cybersecurity today and we will tell you what we would change first. Or call 509-530-1411.