For example, here at Karbon, we make security education part of the onboarding process when a new employee starts. The basics are covered, like using the Okta platform to access protected passwords and apps (rather than writing passwords down anywhere or using the same password many times). And we also cover the obvious (yet unfortunately not-so-obvious) like not using outside removable USB sticks, safe internet habits, and all the other scenarios you’d be surprised how many people forget (or worse, don’t deem important).

Netflix’s The Great Hack acted as a bit of a wake-up call for people and businesses, showing how easily your data can be accessed from the world’s largest social media networks like Facebook. Ensuring you and your team are using multifactor authentication in nearly all of your mainstream apps (email, Google, Office 365, etc.) has now become a basic requirement of responsible business practices.

Step 3: Make sure your team has a handle on how to protect personal, company and client information

How often does your team talk about security and privacy? Where does it play a role in your business? Does it get brought up at all?

As much as anything else, prioritizing data security and best practices is a cultural decision.

It horrifies me how many accounting practices around the world are still run on Windows servers that act, more or less, as an open invitation to the outside world.

They have virtually no security precautions. They aren’t operating with modern-day technologies. And their clients are left in the dark about the protection (or lack thereof) of their personal information.

One of the many justifications for moving to the cloud is having someone, or some entity, be responsible for making sure that company servers are secure, locked down and inaccessible.

In fact, I view security as one of the most interesting industries in the world right now. It’s already massive, it’s still growing, and it has virtually unlimited potential. For proof, look no further than the 2019 IPO of CrowdStrike. This is a company looking to be the Salesforce of security, and they’re absolutely on that path. It highlights the heightened need and global interest in data privacy and protection happening across every profession, including accounting.

Now more than ever, security and privacy need to be embedded deeply into the culture of your accounting practice. Otherwise, a vulnerability or breach is inevitable.