10/21/2026
Containing a cyber incident is only the beginning. A CPA firm may still need to determine what information was accessed, investigate whether vulnerabilities remain, address notification requirements, and manage disruption to clients and day-to-day operations. The response can quickly become more complex than the initial incident itself.
During Cybersecurity Awareness Month, it’s worth looking beyond prevention and considering how prepared your firm is to respond if an incident occurs. An incident response plan, strong security protocols, and a clear understanding of where firm data resides can all play an important role.
In a recent article for Inside Public Accounting, Sarah Ference CPA, Risk Control Director at CNA Insurance, takes a closer look at the potential impact of a data security incident and considerations for strengthening firm defenses. Read more: https://brnw.ch/21x6zY0