Tax-season readiness
Plan support coverage, lifecycle work, changes, and recovery priorities around the firm’s busiest periods.
Technology for accounting firms
Managed technology for CPA firms that cannot compromise on availability or client data.
Support tax-season workloads, CPA applications, secure client information, business continuity, and ongoing technology decisions through one accountable team.
Direct answer
CPA firms need technology operations built around deadlines, sensitive data, and specialized applications.
ABT supports accounting and tax firms with managed IT, security, cloud, backup, vendor coordination, and practical planning that reflects the demands of tax season and year-round client service.
The engagement begins with the firm’s actual applications, workflows, staff, locations, service providers, recovery priorities, and legal or contractual obligations. Final scope and compliance responsibility remain defined in writing.
CPA applications
Support the systems surrounding the firm’s core accounting software.
ABT can support the infrastructure, access, devices, cloud services, backups, and vendor coordination surrounding these products and other approved applications.
- CCH ProSystem fx Suite
- CCH W2/1099
- Thomson Reuters CS Professional Suite
- Thomson Reuters Checkpoint Tools
- Intuit ProSeries
- Intuit QuickBooks
Service coverage
Connected responsibilities, not isolated products.
CPA application support
Support and coordinate the technology surrounding CCH, Thomson Reuters, Intuit, QuickBooks, and other approved accounting applications.
Identity and access
Manage user lifecycle, multifactor authentication, privileged access, remote work, and permissions around sensitive client information.
Security and compliance alignment
Translate written requirements and risk decisions into practical technical and operational safeguards with evidence for owner review.
Backup and business continuity
Connect Microsoft 365, server, cloud, and line-of-business recovery planning to documented business priorities and testing.
Vendor and technology management
Coordinate software vendors, internet providers, cloud platforms, warranties, renewals, and infrastructure decisions.
FTC Safeguards Rule
Turn regulatory requirements into assigned, documented safeguards.
The FTC identifies tax preparation firms as an example of a financial institution covered by the Safeguards Rule, while applicability depends on the activities a firm performs and the regulator with authority. [1]
IRS Publication 4557 also tells tax return preparers to create and enact security plans to protect client data. [4]
Designate a Qualified Individual [2]
Assign qualified oversight for the written information security program while the firm retains responsibility.
Base the program on a written risk assessment [2]
Identify customer information, systems, foreseeable internal and external risks, existing controls, and how risks will be mitigated or accepted.
Implement risk-based safeguards [2]
Address access controls, asset and data inventory, encryption, application security, multifactor authentication, secure disposal, change management, and activity logging.
Monitor and test controls [2]
Use effective continuous monitoring or perform annual penetration testing and vulnerability assessments at least every six months, plus testing after material changes.
Train personnel [2]
Provide security awareness training and keep responsible security personnel current on changing threats and countermeasures.
Oversee service providers [2]
Select capable providers, require safeguards contractually, and periodically reassess providers based on risk.
Keep the program current [2]
Adjust the information security program after testing, risk reassessment, operational changes, and emerging threats.
Maintain a written incident response plan [2]
Define goals, internal response processes, decision authority, communications, remediation, documentation, and post-incident review.
Report to leadership [2]
Require the Qualified Individual to report in writing regularly and at least annually to the board, governing body, or responsible senior officer.
Notification requirement
Covered notification events may require notice to the FTC within 30 days.
The current Rule requires notice as soon as possible and no later than 30 days after discovery when a notification event involves at least 500 consumers. The definition addresses unauthorized acquisition of unencrypted customer information and circumstances involving an accessed encryption key. [2] [3]
Important: ABT provides technology implementation, operations, documentation, and evidence support—not legal advice, an independent audit, or a guarantee of compliance. The firm should confirm applicability, exemptions, interpretations, and reporting duties with qualified legal counsel or an independent assessor.
The ABT difference
The difference is ownership.
ABT stays at the center, coordinating the connected responsibilities around this service instead of leaving the business to manage the gaps between them.
Tax-season readinessCPA application supportIdentity and accessSecurity and compliance alignmentABT
Operating rhythm
A clear path from question to managed responsibility.
Discover
Inventory applications, data flows, users, service providers, deadlines, risks, and current controls.
Stabilize
Address urgent reliability, access, protection, backup, and lifecycle priorities.
Align
Connect approved safeguards, documentation, policies, testing, and responsible owners.
Manage
Operate the environment, coordinate vendors, review evidence, and improve the roadmap over time.
More from ABT
CPA IT can connect with every other ABT service.
Use one accountable team for the adjacent systems, projects, communications, digital presence, and AI initiatives surrounding the firm.
- 01Managed IT
Proactive monitoring, support, maintenance, recovery, vendor coordination, and technology planning.
→ - 02Managed AI
Choose approved tools, protect sensitive information, automate useful work and operate AI with the same ownership expected from other business technology.
→ - 03Cybersecurity
Protect identities, devices, email, data and continuity without separating security from the systems and people it supports.
→ - 04Cloud IT
Plan, migrate and manage cloud services around identity, collaboration, resilience and the way employees actually work.
→ - 05Business VoIP
Plan cloud calling, numbers, users, call flows and support as one coordinated communications system.
→ - 06Structured Cabling
Plan organized data and voice infrastructure for offices, moves, expansions, wireless coverage and equipment changes.
→ - 07IT Consulting
Turn system constraints, risk, vendor choices and upcoming change into a practical technology roadmap.
→ - 08Web Design
Connect brand, content, accessibility, search visibility and conversion in a portable website the business can own and improve.
→ - 09SEO
Improve how the right customers discover, understand and act on the business across search and local results.
→ - 10Digital Marketing
Coordinate search, campaigns, landing experiences, measurement and follow-through around clear business goals.
→
Common questions
CPA IT Solutions FAQ
Does ABT support accounting and tax software?
ABT can support the surrounding systems and coordinate with vendors for products such as CCH, Thomson Reuters, Intuit, and QuickBooks. Exact application responsibility and vendor escalation paths are confirmed during discovery.
Does every CPA firm fall under the FTC Safeguards Rule?
The FTC specifically identifies tax preparation firms as an example of a covered financial institution, but applicability depends on the activities the firm performs and which regulator has authority. The firm should confirm legal applicability with qualified counsel.
Can ABT certify that a CPA firm is compliant?
No. ABT can help implement and operate approved technical safeguards, document work, and produce operational evidence. Legal interpretations, formal compliance determinations, and independent assessments belong with the firm’s counsel or qualified assessor.
Can work be scheduled around tax season?
Yes. The operating plan can sequence projects, maintenance, testing, and changes around filing deadlines and other business constraints.
Can CPA IT be combined with ABT’s other services?
Yes. CPA firms can combine Managed IT with cybersecurity, cloud, VoIP, cabling, consulting, web, SEO, digital marketing, and Managed AI services when appropriate.
Start with the business problem