Tax Office issues cyber warning for tax professionals
Tax professionals must ensure the security of their business premises, client information and digital resources over the holiday break, the Tax Office has warned.
With the fast-approaching holiday period, the ATO has reminded tax professionals to reinforce the cyber security of all devices and their access to keep client information secure.
The ATO said tax professionals should consider following the Cyber Wardens cyber security holiday guide if planning to close the workplace over the holiday period.
“The cyber security holiday guide offers simple, actionable steps to help you bolster your digital defences during the festive season, along with quick reminders to keep you and your team cyber-safe,” the ATO said.
“Cyber criminals love the holiday season. They know small businesses are juggling holiday orders, staff schedules and last-minute to-dos, so they ramp up their efforts to catch you off guard.”
According to the Cyber Wardens cyber security guide, cyber criminals never stopped looking for ways to break into a business and the main crimes that impacted small businesses included, inbox break ins, fake invoices and payment redirection scams and banking burglary.
The guide also suggested 12 different methods tax professionals could take when protecting confidential information over the Christmas period.
Suggestions included setting up multi-factor authentication, using secure Wi-Fi connections, encrypting sensitive data, locking down social media pages, securing banking information and keeping software up to date.
The Tax Office also provided tips and advice for tax professionals to ensure the integrity and professionalism when protecting clients’ data.
The ATO recommended for all physical files to be safely secured as thieves could easily photograph hard copies of clients’ files so “it’s crucial that all physical information is stored in locked storage units or shredded.”
It was also advised for tax professionals to log out of all devices and securely store them out of sight where they could not be easily found and accessed.
“You should also ensure all devices are using the latest software. Cyber criminals use known weaknesses in systems or apps to hack into devices,” the ATO said.
“Our list is not an exhaustive list, and it’s important you take all necessary steps to ensure client information is protected.”