1,113

Data Breaches

The highest annual total of notifiable data breaches since mandatory NDB reporting began in 2018. (OAIC)

59%

Malicious or Criminal Attacks

Share of Australian data breaches in the first half of last year caused by malicious or criminal attacks — phishing was the leading cause. (OAIC, Jan–Jun 2025)

37.4M

Stolen User Data

Downloads of Chrome browser extensions found to be secretly leaking or stealing user data, uncovered in a single research investigation. (SecurityWeek, Feb 2026)

Trusted by 28,000+ Australian accounting and bookkeeping professionals
WHY IT MATTERS

Most firms don’t actually know what “covered” means.

Most firm owners assume their setup protects them. Few can say exactly what’s protected, what isn’t, and where the gaps are — and fewer still have checked since the threat landscape shifted.

These 24 questions show you where you stand today, built around how accounting and bookkeeping firms actually work.

Some you’ll answer with a confident yes. Others might be the first time you’ve thought to ask. Both are worth knowing.

Device Security
the 6 controls over every computer your team uses to reach client data.
Browser Security
the 8 newest blind spots: AI tools, extensions, and credential theft.
Compliance & Readiness
the 3 questions that separate "we think we're covered" from "we know we're covered."
WHERE PRACTICE PROTECT FITS

We’re proud to be custodians of security within the accounting profession.

You don’t need to become a security expert to run a secure firm. That’s the point of Practice Protect: built exclusively for accounting and bookkeeping firms, set up and managed for you, so the controls in this checklist are simply handled.

Every day, we identify security gaps that firms don't know they have.
And because we work exclusively with firms like yours — over 28,000+ professionals on the platform — every threat one firm sees becomes protection the rest already have. That's a network immunity effect no generalist IT provider serving fifty different industries can build.

Cyber security shouldn’t become an expensive compliance burden.

Our approach is to simplify the complex, reduce the uncertainty, and deliver practical protection at a value no generalist can match.

Use the checklist to identify what’s working and uncover what isn’t. Then book a complimentary 30-minute security consultation — we’ll walk through your results, answer your questions, and help you prioritise the next steps.

firm owner's security checklist 2026
This checklist is an educational resource, not legal or compliance advice.