<p>Episode description (120–180 words): Cybersecurity is no longer optional for tax and accounting firms. In this episode, hosts Mo Arbas and Paul Miller are joined by Steve Ferguson (Protection Plus) to break down what really keeps practices safe—and operating—when threats hit. They cover why small firms are prime targets, how phishing and AI‑driven scams fool even savvy teams, and why MFA alone isn&#39;t enough as zero trust becomes the new standard. Steve explains must‑have protections, including cyber insurance with breach response, plus the role of a written information security plan (WISP) required by FTC/IRS guidance. You&#39;ll hear real‑world stories—from kiosk‑seeded refund diversions to gift‑card cons—and practical steps for training staff, reducing liability, and responding fast to limit damage. If you handle client data, this conversation is your playbook for Cybersecurity Awareness Month and beyond.</p>

Pulse of the Practice

Thomson Reuters

Hackers Love Small Tax Firms: Why MFA Is Already Obsolete—and What Could Save You

OCT 28, 202527 MIN
Pulse of the Practice

Hackers Love Small Tax Firms: Why MFA Is Already Obsolete—and What Could Save You

OCT 28, 202527 MIN

Description

<p>Episode description (120–180 words): Cybersecurity is no longer optional for tax and accounting firms. In this episode, hosts Mo Arbas and Paul Miller are joined by Steve Ferguson (Protection Plus) to break down what really keeps practices safe—and operating—when threats hit. They cover why small firms are prime targets, how phishing and AI‑driven scams fool even savvy teams, and why MFA alone isn&#39;t enough as zero trust becomes the new standard. Steve explains must‑have protections, including cyber insurance with breach response, plus the role of a written information security plan (WISP) required by FTC/IRS guidance. You&#39;ll hear real‑world stories—from kiosk‑seeded refund diversions to gift‑card cons—and practical steps for training staff, reducing liability, and responding fast to limit damage. If you handle client data, this conversation is your playbook for Cybersecurity Awareness Month and beyond.</p>