Sensitive data requires stringent protections. This comprehensive map outlines the regulations, professional standards, and industry-standard security frameworks every accounting firm needs to know. Use it to understand your firm’s responsibilities, support internal assessments, and prepare for external reviews. This document is not legal advice.
Inside, you’ll find:
- Federal baseline regulations every accounting firm must follow
- Cybersecurity assurance obligations under AICPA Code and Circular 230
- State privacy laws, breach notification laws, and cyber insurance requirements
- Specialized regulations under HIPAA, SOX/PCAOB, and FISMA/IRS Pub 1075
- Security baselines for MFA, offboarding, backups, and ransomware resilience