Skip to main content
FREE RESOURCE

Is your firm's IT actually
protecting ATO and client data?

A small Australian accounting firm carries TFNs, BAS, payroll, SMSF portfolios, and ATO logins. The kind of data attackers monetise in hours through invoice fraud and payroll redirection. This audit walks you through the IT controls.

CHECKLIST · 8 PAGES · 12 MIN

Get the audit, sent to your inbox

Your email + business name. That's all. We send the PDF immediately and add you to Tech News Monthly (unsubscribe any time).

Download the audit

Instant access. No credit card, no phone call.

By downloading you agree to receive Tech News Monthly (monthly summary of cyber + IT news for Aus SMBs). Unsubscribe any time. See our privacy policy.

What's inside

  • Identity and access checks for tax software, ATO portals, M365, and online banking
  • Where client working papers should live and where they end up instead
  • Bank and payroll fraud defence (the highest-loss event in Australian accounting)
  • The three things every firm should fix first

Format

8-page PDF · A4 · ~403 KB · readable on any device

IS THIS FOR YOU

Written for Australian accounting firm partners and practice managers

You'll get value from this if

  • You run a 5 to 50 staff accounting firm and want a structured IT security review
  • Your professional body, insurer, or a client asked about your cyber posture
  • A peer in your network was hit with a payroll redirection or BEC attack

This is not

  • Tax, ATO, or Privacy Act compliance advice
  • A formal IT audit (that is the CIO Tech IT Audit, fixed scope, fixed fee)
  • A substitute for engaging a specialist if you have had a breach

Cyber Posture Snapshot

Your details 1 / 10

How exposed is your business?

Six quick questions, two short ones to tailor the result, and you'll see where your business stands. About two minutes. Plain English, no jargon.

We'll use your email to send a copy of your result. No spam, no pushy sales calls.

Question 1 of 9

When your team logs in to email and business apps, do they need a code from their phone as well as a password?

Question 2 of 9

If a ransomware attack locked all your files tomorrow, could you restore them from a backup?

Question 3 of 9

When Microsoft or Apple release a critical security update, how fast does it land on your computers?

Question 4 of 9

How many people in your business can install software or change system settings on any work computer?

Question 5 of 9

If a staff member got a fake invoice or "urgent" email pretending to be from you right now, what would happen?

Question 6 of 9

When a staff member leaves, when does their access to email, files, and apps actually get cut off?

Question 7 of 9

How many people work in your business?

Question 8 of 9

Who looks after your IT today?

Question 9 of 9

What sort of business are you?

Tailoring your result...

Hi there, here's where your business stands.

Your Cyber Posture
Critical gaps Critical
Notable exposure Notable
Mixed picture Mixed
On the right track On track

Notable exposure

Your two biggest gaps

  1. 1
  2. 2

Where this leaves you on Essential Eight

  • MFA Multi-factor authentication
  • Backups Regular backups
  • Patching Covers 2 of 8: Patch applications + Patch operating systems
  • Admin access Restrict administrative privileges

This snapshot covers 5 of the 8 Essential Eight controls. The full IT Maturity Assessment covers all 8, plus Microsoft 365 hardening, device management, and staff training.

What to do next

Primary CTA

Secondary CTA