Accounting practices carry more sensitive client data per file than almost any business — and under AML/CTF Tranche 2, some now carry new retention obligations on top. A breach here means personally telling every client their financial life is exposed. This check shows you where you stand.
The two-minute check gives you an instant read. If you want the full picture, our fixed-price Data Security Review looks at each of these in your business and hands you a prioritised plan.
Where client data lives
Are TFNs and ID documents ever stored in a staff member's email inbox?
Personal devices
Can staff reach client financial records from devices your practice doesn't control?
Authentication
Is MFA on across your practice software, email and document store — all three?
Data in transit
Are client documents ever sent or received over unencrypted email?
Ransomware resilience
Is client data backed up somewhere an attack couldn't also reach?
Breach readiness
Do you have a written first-hour plan, including your OAIC notification duties?
The review is an assessment and a roadmap, done with your cooperation — not a penetration test, not a compliance certification, and not legal advice. We tell you where your gaps are and what to fix first, in plain English. If you'd rather your existing IT provider close them, the report is written so they can. Regulatory references are general information; confirm your specific obligations with your own adviser.
Your review is handled by a senior specialist — not a call centre, not a hand-off. Email us and we'll set up a 15-minute call.
hello@circuitrisen.com