The challenge
The firm's insurer threatened non-renewal unless MFA, endpoint protection and tested backups were in place within 60 days — in the middle of tax season.
What we did
- Rolled out multi-factor authentication to every account in phased groups so no preparer lost a working day
- Replaced consumer antivirus with managed EDR and email security
- Migrated the file server to SharePoint with retention policies and immutable cloud backup
- Drafted the Written Information Security Plan required under FTC Safeguards
Results
Policy renewed with a lower premium
Zero downtime during the April filing peak
WISP and evidence package ready for future audits
Representative engagement: a composite of similar projects, with identifying details changed. Ask us for references in your industry.