Skip to main content


2022 Digital Security and Cybercrime Update

In 2021, cybercrime cost U.S. businesses more almost $7 billion, yet today, only 50% of U.S. businesses having a cybersecurity plan in place.

In 2021, cybercrime cost U.S. businesses more almost $7 billion, yet today, only 50% of U.S. businesses having a cybersecurity plan in place.

ThoughtLab, a leadership and economic research firm recently conducted a cybersecurity benchmarking study. The study, Cybersecurity Solutions for a Riskier World analyzed cybersecurity strategies, with 1,200 large organizations in 16 countries participating in the study.

According to the study, material breaches rose 20.5% from 2020 to 2021, with cybersecurity budgets rising as a direct result of those breaches. But increased budgets do not necessarily  equate with preparedness, with 29% of CEOs and 40% of chief security officers admitting that their organizations remain unprepared for a large-scale cyberattack. Their reasons varied:

  • 44% cited supply chain issues
  • 41% cited the fast pace of digital innovation
  • 28% cited inadequate cybersecurity budgets and lack of executive support
  • 24% cited a shortage of talent versed in cybersecurity

How do these facts impact your firm? Keep in mind that in some states, CPA firms are held liable for any data breaches that impact their client’s personal data. But even if you’re not legally responsible, a cybercrime committed against your firm will directly impact your current client list as well as those looking to contract with your firm for services.

Though cybercrime threats vary, today, ransomware and phishing are considered the two top threats to businesses nationwide. If you’re not exactly sure what ransomware and phishing are and the impact they can have on your business, read on.

Ransomware and Malware

Ransomware is a type of malware that is used most often, infiltrating your computer system and encrypting the files so that you’re unable to access the system unless a ransom is paid. If the ransom is paid, the company receives an encryption key that will allow them to access their files once again.

In many cases, businesses have resorted to paying ransom to gain access to their files. Unfortunately, paying the ransom is no guarantee that the hackers will give you access to your files.


In years past, phishing attempts were clumsy and fairly easy to detect. That’s not the case today, with counterfeit communications difficult to identify. Today, there are over 150 million phishing emails send daily.

Phishing typically lures victims in by email, with the request made to look like communication from a trusted institution such as a bank or government agency. A link is always included in the initial contact email or text, which takes you not to the site indicated, but to the hacker’s site, where your personal information can be easily compromised. Because of the level of sophistication available to hackers, it can be difficult to determine the legitimacy of an email or text.

One way to check for the legitimacy of a link is to place your mouse over the link itself. This will display the hyperlink and allow you to see exactly where the link will take you.

Of course, the best way to prevent phishing is to not click on any link sent to you until you’ve verified it. It’s also important to never respond to an email or text that requests personal information or asks for a password.  

Whether your firm is small or you have offices around the world, you’re vulnerable to cyberattacks. Taking the proper precautions will help keep your firm and your client data safe.

See inside October - November 2022

5 Alternative Work Schedules to Replace Your 9-to-5 & Make Your Firm Happier

Many workers have begun to demand more flexible work schedules. Those with families generally want the option of working from home at least one day a week.


Finance Professionals Offer Powerful Defense Against Cybersecurity Threats

The 2022 AFP Payments Fraud and Control Survey found that 71 percent of organizations were victims of payments fraud attacks or attempts last year.