5-minute check
Cyber Health Check for accounting practices
Find your cyber risks.
A 5-minute check for practice principals, partners, practice managers, and operations managers who need to know whether cyber or IT risk could interrupt tax work, payroll, client portals, or payment approvals.
For accounting practices
Checklist before any review
Case study
An accounting firm gave staff home access to its tax and accounting systems
During COVID, the firm needed its accountants and support staff to work from home without losing access to client files, email or the systems behind tax and payroll work.
Remote work became the firm's permanent operating model
Crypton set up secure access to the firm's systems, standardised the computers used from home and gave staff one support path outside the office. The firm stayed fully remote and retained part-time staff who could keep working while caring for their families.
The office stopped being a dependency
Staff could reach the systems and files they needed from home without relying on an open office.
Part-time staff could stay with the firm
The remote model let experienced staff keep working while looking after their families.
Remote support had one owner
Crypton supported staff accounts, computers and access without asking the team to return to the office for routine IT help.
Who this is for
Built for the people accountable for practice risk
The questions are written for the people who feel the impact when lodgement deadlines, payroll, payment approvals, or client records depend on systems staying available and controlled.
Practice principals and partners
Need a plain view of the risks that could affect client confidentiality, billable work, lodgements, and reputation.
Practice managers
Need to know whether staff access, onboarding, offboarding, support, and daily systems are under control.
Deadline-heavy practices
Need confidence that email, tax portals, files, internet, and backups will hold up during lodgement pressure.
Practices handling payment changes
Need a practical check of approval steps for changed bank details, supplier payments, refund requests, and payroll instructions.
What it checks
Checks matched to how accounting practices work
Client file access
Check who can access tax files, payroll data, financial records, and sensitive client folders.
Payment and bank-detail changes
Check how changed bank details, refund requests, supplier payments and approvals are checked.
Deadline-critical systems
Check whether email, files, tax portals, practice systems, and internet access can hold up during lodgement pressure.
Microsoft 365 and admin access
Check MFA, administrator accounts, mailbox access, offboarding, and risky sign-in review.
Backup restore confidence
Check whether email, files, and key systems can be restored when client work cannot wait.
AI and client information
Check whether staff know which tools are approved and what client information must stay out of public tools.
Measures
What an accounting practice can check first
Client records, tax files, and payroll data access
Changed payment instructions and approval checks
Mailbox compromise and suspicious sign-in response
Departed staff access across Microsoft 365 and practice systems
Backup restore confidence before deadline pressure
AI use with client and financial information
What you get
A checklist a practice leader can use
A ranked list of the risks to check first
Plain-English reasons for each priority
Next actions grouped into urgent, worth checking, and under control
A natural next step only if the result shows a closer review is useful
Result routing
The review comes after the checklist
The assessment gives the practice a concrete checklist first. If the result points to urgent access, recovery, payment, or deadline risk, the next step is a focused review of those gaps.
01
Strong result: keep the checklist and review records later
02
Developing result: work through the unclear controls first
03
Needs attention: talk through the priority gaps with Crypton
Start here
Get the checklist first
Answer the accounting practice check, see what needs attention, then decide whether a deeper review is worth your time.