Cybersecurity for Professional Services

Home/Cybersecurity for Professional Services

Law firms, accounting firms and advisors hold exactly what attackers want: client files and the authority to move money. In the ABA's Legal Technology Survey, more than one in four responding firms has reported a security breach at some point, and the FBI counted $2.77 billion in business email compromise losses in 2024, much of it wire fraud that started with a spoofed email to a firm or its client.

Cytek protects professional firms with 24/7 monitoring, regular testing and plain-language reporting through the Safeguard™ platform, so you can show clients, insurers and regulators what you have in place.

Talk to an analyst →Get your security score

01

Why attackers target professional firms

  • You move money on instruction. A spoofed email from a partner, client or title company asking to change wire details is the most common loss we see.
  • Client data is concentrated. One mailbox or document system holds tax returns, contracts, medical records and deal terms for hundreds of clients.
  • Deadlines create pressure. Tax season, closings and court dates make ransomware pay, because you cannot afford to be locked out for a week.
  • Nobody is watching. Most firms have an outsourced IT provider for support, but no one monitoring for an attacker who already has a password.

02

What clients, regulators and insurers expect

The rules differ by profession, but they point the same direction: reasonable safeguards, written down, and a plan for when something goes wrong.

  • Lawyers. Model Rule 1.6(c) requires reasonable efforts to prevent unauthorized disclosure of client information. ABA Formal Opinion 483 adds that when a breach affects client information, you must tell current clients.
  • Accountants and tax preparers. The FTC Safeguards Rule treats tax preparers as financial institutions. It requires a written information security plan (WISP), a named person in charge, multi-factor authentication, encryption, annual penetration testing with vulnerability scans every six months (or continuous monitoring), and notice to the FTC within 30 days when a breach affects 500 or more people. IRS Publication 4557 walks through it.
  • Investment advisors. SEC Regulation S-P now requires an incident response program and customer notice within 30 days. See our finance and insurance page.
  • Everyone in Oklahoma. The updated Security Breach Notification Act, effective January 1, 2026, requires notice to the Attorney General within 60 days when a breach affects 500 or more residents, and gives a safe harbor to businesses that keep reasonable safeguards.
  • Clients and insurers. Expect security questionnaires from larger clients, and cyber insurance applications that ask for MFA, endpoint detection, tested backups and training.

03

How Cytek helps

Related

Also see

Finance and insurance

Banks, credit unions, advisors and agencies with examiners to answer to.

Learn more →

Small and mid-size businesses

Any company handling customer data, payments or payroll.

Learn more →

Safeguard platform

MDR, SIEM, ITDR, scanning and more in one portal.

Learn more →

FAQ

Frequently asked questions

Does the FTC Safeguards Rule apply to a small CPA firm?

Yes, if you prepare tax returns or handle financial information for clients, whatever your size. Firms holding information on fewer than 5,000 consumers are exempt from a few of the written requirements, but still need safeguards, multi-factor authentication, encryption and the 30-day FTC breach notice.

Do lawyers have to notify clients after a breach?

Under ABA Formal Opinion 483, yes for current clients when the breach involves, or is likely to involve, their confidential information. State law may also require notice to affected individuals and to the Oklahoma Attorney General.

What is the most common attack on professional firms?

Business email compromise. An attacker gets into or imitates a mailbox and sends new wire or payment instructions. Multi-factor authentication, ITDR and a call-back rule for any payment change stop most of it.

Will Cytek replace our IT company?

No. We are the security team that works alongside your IT provider. They keep things running; we watch for attackers, test your defenses and handle the security documentation.

Sources: ABA Cybersecurity TechReport · FBI IC3 2024 Internet Crime Report · FTC Safeguards Rule guide · ABA Formal Opinion 483 coverage (ABA Journal) · Oklahoma SB 626 summary (National Law Review). This page is general information, not legal advice.

Protect your clients and your reputation

Talk to an analyst about monitoring, testing or the Safeguards Rule.

Talk to an analyst →Get your security score