yossio Stephen M. Yoss, CPA
Home Articles
Cybersecurity Defense for CPAs — course hero graphic

Cybersecurity Defense for CPAs

📋 Overview

AI has changed cybercrime faster than most firms have changed their defenses. Phishing emails now arrive error-free and personalized, often referencing real colleagues, clients, and projects. Cloned voices and deepfake video are being used to request wire transfers and banking changes. Ransomware operators use AI agents to break into networks in hours instead of weeks, and breaches increasingly come through trusted vendors and connected apps rather than a firm's own systems. This session looks at how today's attacks actually work, the scams circulating right now, and why the warning signs professionals were trained to look for no longer apply. This is not another "don't click the link" lecture. You'll see real attack patterns taken apart step by step, learn to recognize AI-generated fraud when it lands in your inbox or on your phone, and put verification habits in place that hold up even when the request looks and sounds legitimate. You'll leave with a clear picture of the threats that matter this year and a prioritized set of defenses for your firm, your staff, and your clients.

👥 Who Should Attend

CPAs and financial professionals seeking a practical foundation in modern cybersecurity.

Prerequisites
None
Advanced Prep
None

🎯 Learning Objectives

🚀 What You'll Walk Away With

📚 Major Topics

  1. The AI-powered attacker: phishing, deepfakes, and voice cloning
  2. Today's scams: what's hitting accounting and finance professionals now
  3. Ransomware and breaches: faster attacks and the vendor back door
  4. Building defenses that work: verification, access controls, and staff readiness

🏷️ Topics

CPA cybersecurity update 2026Business Email Compromise preventionransomware defense for accountantssocial engineering awarenessAI confidentiality risksZero Trust for CPAsidentity managementcloud accounting securityprofessional liability du

❓ Questions

Do I need an IT or security background to take this course?

No. It's a basic-level course written for accounting and finance professionals. The focus is on recognizing attacks and putting practical defenses in place, not on technical configuration.

Is this just another 'don't click the link' training?

No. The course looks at how today's attacks actually work, including AI-written phishing, cloned voices, deepfake video, and AI-assisted ransomware, and why the old warning signs no longer apply.

Will I see real examples?

Yes. You'll work through examples of AI-generated fraud, current scams aimed at accounting and finance professionals, and a documented ransomware or breach attack broken down step by step.

Does the course cover written security plans or IRS data-security requirements?

Not in depth. This session focuses on current threats and the defenses that stop them. Written information security plans and IRS requirements are covered in separate courses.

What will I be able to put in place right away?

A callback verification procedure for payment requests and banking changes, plus a short list of the controls that most effectively reduce the risk of AI-enabled fraud, ransomware, and data breaches.

🗂️ Course Details
Course #
134
Short Name
Cybersecurity Defense
Created
2026-03-28
Last Updated
2026-09-30

✍️ A Note from the Author

I built this course because the scams hitting accounting firms today don't look like the ones we trained people to catch. The emails are clean, the voices sound right, and the attacks move faster than most firms can react. I wrote it for professionals who need to recognize these attacks and stop them without becoming security specialists.

🎤 About the author

Stephen M. Yoss, CPA

Stephen is a certified public accountant, the CEO and partner of Devmatics, LLC, a continuing education instructor for financial professionals, a professional speaker at live events, and a licensed pyrotechnician. While his interests and skills are varied, they all share a common thread—his love for and skill in finding technology-based solutions. Whether it’s teaching in the classroom, consulting clients in a boardroom, or shooting a fireworks display, Steve brings passion, hard work, value—and above all else—technological expertise to each of his clients. With an open, honest approach, he creates a unique strategy for each client specifically designed to benefit their needs and streamline their operations in order to create efficiency and maximize their financial potential.

Share

Interested in this course?

Reach out for more information or to bring this training to your organization.