Accounting and professional services
Client money and client files, handled with care.
Practices hold tax file numbers, bank details and financial records for every client, and move money on their instructions. That makes payment fraud and mailbox takeover the risks that matter most day to day.
Situations we help with
A client’s supplier “changes bank details”
An email that looks like it comes from a client’s supplier asks you to update the account on an invoice you are about to pay on their behalf.
What helps: Email protections that make impersonation harder, a call-back rule for any change of bank details, and staff who have practised spotting the request.
A partner’s mailbox is signed into from overseas
Someone has the password for a partner’s Microsoft 365 account and has set up a rule forwarding client emails to an outside address.
What helps: Multi-factor authentication for everyone, external forwarding blocked or alerted, and sign-in monitoring someone actually looks at.
A lost laptop with client files
A staff laptop is left in a taxi with a year of working papers on it.
What helps: Disk encryption on every device, files stored centrally rather than only on the laptop, and the ability to lock or wipe a managed device.
Depending on your business, privacy obligations such as the Notifiable Data Breaches scheme may apply when personal information is involved. Whether they apply to you, and what they require, is a question for your legal or compliance adviser — we can help you get the facts together for that conversation.
Relevant services
Security baseline and uplift
Find the gaps, fix what matters, prove it is done.
Quoted on scopeRequest a quoteMicrosoft 365 security
Secure your Microsoft 365 tenant without breaking how your business works.
Quoted on scopeRequest a quoteGoogle Workspace security
Configure Google Workspace securely, around how your team works.
Quoted on scopeRequest a quoteEssential Eight uplift
Know your Essential Eight maturity, and lift it to the level you choose.
Quoted on scopeRequest a quoteCompliance readiness
Get ready for independent assessment, with the evidence in order.
Quoted on scopeRequest a quoteEmail security and fraud protection
Make your domain harder to spoof and payment fraud harder to pull off.
Quoted on scopeRequest a quoteStaff awareness and phishing simulation
Short, relevant training and realistic practice for your team.
Quoted on scopeRequest a quoteBackup and recovery readiness
Know you can get your business back, not just that backups ran.
Quoted on scopeRequest a quoteIncident preparedness
Know who does what before something goes wrong.
Quoted on scopeRequest a quoteAI security and governance
Use AI tools with clear rules, sensible permissions and evidence.
Quoted on scopeRequest a quoteCyber insurance readiness
Answer your insurance questionnaire accurately, with evidence behind it.
Quoted on scopeRequest a quoteManaged endpoint and identity protection
Coming soonProtection on your devices and accounts, with alerts handled.
Register interestIncident response and remediation
Coming soonStructured investigation, containment and recovery when something goes wrong.
Register interestPenetration testing and assurance
Coming soonAuthorised, scoped testing that shows what an attacker could do.
Register interest
Talk to us about your business.
A short sales scoping call to understand your setup and agree what is in scope. It is not a free security review.