Dates and location
Hours
Dates and location
Hours
Description
Cybersecurity & AI for Accounting Professionals: Protecting Client Data in an Evolving Threat Landscape
In recognition of Cybersecurity Awareness Month, join us for a practical 60-minute virtual Lunch & Learn designed to help accounting professionals strengthen their cybersecurity knowledge and better protect confidential client information. This timely session will explore PIPEDA breach obligations, emerging AI-enabled fraud targeting accounting firms, the safe use of AI tools such as ChatGPT, and practical AI workflows that can improve efficiency without compromising privacy or professional obligations.
SESSION OUTLINE (60 minutes)
- 1:00–1:05 — Welcome, sponsor recognition, and brief speaker/company introduction
- 1:05–1:15 — When client data leaks: PIPEDA breach obligations every firm must know
- 1:15–1:30 — The new face of fraud: real examples of AI-powered attacks on accounting firms
- 1:30–1:40 — Using AI without leaking client data: where the line is, and what an AI usage policy covers
- 1:40–1:50 — The upside: AI workflows that give practitioners hours back (live walkthrough)
- 1:50–2:00 — Q&A and attendee materials
Every participant will receive:
- Cybersecurity checklist for accounting firms
- PIPEDA-aligned breach-response plan template
- AI usage policy template
This session is sponsored by SecureWize MSP, a Toronto-based IT and cybersecurity firm serving accounting firms and professional practices. SecureWize acts as its clients' complete IT and security department — providing managed IT, cybersecurity, privacy compliance support, and AI advisory — with an education-first approach to helping firms protect client data.
Key Takeaways
By the end of this session, participants will be able to:
- Explain a firm's obligations under PIPEDA when client data is breached — reporting to the Privacy Commissioner, notifying affected individuals, and the mandatory 24-month breach record-keeping requirement
- Recognize current AI-enabled fraud targeting accounting practices, including CRA-themed phishing, "updated banking details" invoice fraud, voice cloning, and EFILE / Represent a Client account takeovers — and apply three practical controls that prevent them
- Evaluate safe and unsafe uses of AI tools (such as ChatGPT) in a practice handling confidential client information, consistent with PIPEDA and CPA professional obligations
- Identify AI workflows that safely save practitioners time, such as drafting client correspondence and summarizing CRA notices
Who Will Benefit
This session is ideal for:
- CPAs and accounting professionals in public practice
- Partners, firm owners, and managers of small and mid-sized accounting firms
- Controllers, CFOs, and finance leaders responsible for sensitive financial data
- Tax practitioners and professionals using CRA EFILE or Represent a Client
- Accountants interested in using AI tools safely and effectively
- Professionals responsible for privacy, cybersecurity, internal controls, or risk management
- Anyone looking to better understand emerging AI-enabled fraud and cybersecurity risks affecting the accounting profession
How to Access the Course
An email reminder of this event will be sent out 24 hours prior to the event. If you have not yet received the reminder 4 hours prior to the event, please do not hesitate to reach out. Please check your Junk and Spam folders and ensure membernetwork@cpaontario.ca has been added to your safe addresses.
Speaker(s)
| SPEAKER | |
|---|---|
|
|
Hossein Dadkhah, M.Sc., Co-Founder of SecureWize MSP (Toronto). Hossein holds a master's degree in Information Systems Security and a bachelor's in Software Engineering, and serves as a fractional CIO/CISO to organizations across a range of industries. He works extensively with accounting and professional services firms on cybersecurity, privacy compliance, and the safe adoption of AI, and regularly delivers practitioner-focused security training. (Headshot attached.) SecureWize MSP is a Toronto-based IT and cybersecurity firm serving accounting firms and professional practices. SecureWize acts as its clients' complete IT and security department — providing managed IT, cybersecurity, privacy compliance support, and AI advisory — with an education-first approach to helping firms protect client data. |
