Cybersecurity for Tax Professionals
Author: Robert K Minniti
| CPE Credit: |
2 hours for CPAs
2 hours Federal Tax Related for EAs and OTRPs
2 hours Federal Tax Law for CTEC |
Per the IRS Education Provider Standards this course must be COMPLETED by 12/31/2028 to receive credits. NOTE: Go to My Professional Profile in your CCH CPELink account settings to ensure your name, and PTIN number; matches your PTIN card
This course has been updated to include the new IRS guidance on Written Information Security Plans (WISP). The IRS has recently updated its guidelines for data and cyber security, as required by the Gramm-Leach-Bliley Act, placing additional responsibilities for the security of taxpayer’s personal information on tax preparers. This course is designed for tax professionals who collect and store client’s personal information, who would like to obtain an understanding of data and cybersecurity. You have probably heard of some of the more common types of cyber crimes such as ransomware, spyware, computer viruses, phishing, vishing, spoofing, data breaches, denial of service attacks, hacking, etc. This course is designed to familiarize tax professionals who are not information technology (IT) experts on data breach and cybersecurity risks and internal controls. We will review the IRS recommendations for securing taxpayer information. We will review the new IRS WISP template.
Publication Date: October 2025
Designed For
This course would be appropriate for CPAs, CFEs, CMA, CIAs, CFFs, MAFF, CGMAs, CFOs, CEOs, EAs, and others who prepare taxes or obtain and manage taxpayer information.
Topics Covered
- Cybersecurity & Taxes
- IRS - ISAC
- Cybersecurity Risks
- FTC Safeguards Rule
- Cybersecurity Internal Controls
- IRS Written Information Security Plan Guidelines
Learning Objectives
- Identify how criminals commit acts of cyber fraud
- Identify cybersecurity internal controls that will protect your company from cyber criminals
- Identify the IRS cybersecurity recommendations for tax professionals
- Identify the total cyber fraud complaints received in 2024 based on the FBI’s Internet Crime Report
- Identify the last stage in a ransomware attack
- Identify a basic internal control for protecting a network
Level
Basic
Instructional Method
Self-Study
NASBA Field of Study
Taxes (2 hours)
Program Prerequisites
None
Advance Preparation
None
