Blog | Understanding Cyber Security · 5 min read | Practice Management | Cyber Security | Compliance | AI Governance Quick answer: Shadow AI is staff using their own personal AI accounts, like ChatGPT, Claude or Gemini, to do firm work. It usually starts with good intentions: someone finds a tool that saves them hours […]
Read more
Cyber insurance renewal is one of the few moments a firm is formally asked to describe its own security position.
It arrives as a form. The questions look straightforward, the answers feel obvious, and the whole thing gets completed between other work.
The questions are more specific than they look — and it is easy to reach the day before the form is due still trying to confirm what your firm actually has in place.
Read more
Tools like 1Password, LastPass, and Dashlane were built to solve a credential problem. Australian accounting firms in 2026 have a compliance problem — and the two are not the same thing. The TPB Code, Privacy Act, and ATO now require specific security controls from every registered tax agent. This is what those controls look like, why standard password management doesn’t deliver them, and what a platform built specifically for your profession does instead.
Read more
When a staff member leaves, do you know exactly which apps and portals they can still access? This article covers why manual offboarding fails under regulatory scrutiny — and what Australian accounting firms need to have in place.
Read more
From 1 July 2026, accounting firms in scope for AML/CTF Tranche 2 need more than a compliance program — they need demonstrable access controls. Here's what good looks like, and what AUSTRAC will be looking for.
Read more
The Threat Landscape Has Shifted. Here’s What That Means for Your Accounting Firm in 2026. Something shifted in 2025. The phishing email, the fake invoice, the urgent payment request, they don’t look suspicious anymore. AI wrote them. And they were written about your firm, your clients, and your billing cycle specifically. For accounting professionals who […]
Read more
Take a second. Which AI tools is your team using today?
Most owners can name two or three. The real number is usually higher.
The gap between those two numbers is where the risk sits — tools nobody reviewed, client data in platforms nobody approved. The TPB is clear: the practitioner stays responsible. The tool doesn’t.
This isn’t a session about whether to use AI. It’s about how to use it well.
CEO Jamie Beresford on the ‘tools and rules’ approach to AI governance.
Wednesday 21 October, 12:00pm AEST. Complimentary. Can't make it? Register and we'll send you the recording.
LIVE WEBINAR · 21 OCTOBER, 12PM BRISBANE
Take a second. Which AI tools is your team using today?
Most owners can name two or three. The real number is usually higher.
That gap is where the risk sits — tools nobody reviewed, client data in platforms nobody approved. The TPB is clear: the practitioner stays responsible. The tool doesn’t.
Jamie Beresford on the ‘tools and rules’ approach to AI governance.
Our websites require some cookies to function properly (required). In addition, other cookies may be used with your consent to analyze site usage, improve the user experience and for advertising.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.