--- title: "IT Support and Cyber Security for Accountants in Perth | CCP" description: "IT support and cybersecurity for Perth accounting and bookkeeping firms: AML/CTF record keeping, MFA on ATO services and tax-season uptime from local engineers." url: "https://ccp.com.au/industries/accounting/" --- # IT support for accountants in Perth ## IT built for AML/CTF, tax season and every client’s TFN. Since 1 July 2026, accounting firms that provide designated services are regulated by AUSTRAC under anti-money laundering and counter-terrorism financing (AML/CTF) law. The Privacy Act covers that client data. Our IT support for accountants secures the systems, protects the records and keeps the evidence ready, from Perth. - Secure storage and seven-year retention for client ID and know-your-customer (KYC) records - Multi-factor authentication (MFA) and access controls for practice software and ATO online services - Peak-period uptime for tax, ledger and practice management software - **40+ Google reviews** - Perth clients since 2000 - Zero offshoring We hold ISO/IEC 27001:2022 certification from BSI, [certificate IS 840964](https://www.bsigroup.com/en-AU/products-and-services/assessment-and-certification/validation-and-verification/client-directory-certificate/IS%20840964/). ## Cyber security risks for accounting firms ### Your clients’ data just became regulated data. AML/CTF Tranche 2 brought accountants into AUSTRAC regulation from 1 July 2026, with customer due diligence and seven-year record keeping. Firms previously exempt from the Privacy Act are now covered for that data. - #### KYC records you must now protect Passport scans, company extracts and beneficial-owner details, held for seven years. They are a high-value target, and a breach is reportable. - #### Tax-season attacks ATO-impersonation and phishing campaigns peak when your team is busiest. One click can lock files a week before lodgement. - #### Payment redirection Fake invoices and changed bank details arrive from a compromised mailbox, yours or a client’s. We set up the controls that catch them. ## AML/CTF and privacy deadlines for accountants ### AUSTRAC regulation has started. Privacy reform is next. The dates that affect your IT and data obligations. We track them so you don’t have to. 1. 1 Jul 2026 AML/CTF obligations began for firms that provide designated services, and the Privacy Act now covers that data. 2. 29 Jul 2026 AUSTRAC enrolment deadline for firms already providing designated services. 3. 10 Dec 2026 Privacy policies must explain any automated decisions made using personal information, including decisions made with AI tools. 4. 2026–27 The second tranche of Privacy Act reform is in consultation. It proposes a “fair and reasonable” test for all data handling. ## AML/CTF IT self-assessment for accounting firms ### Could you evidence it if AUSTRAC asked? Six questions that come up in most reviews by AUSTRAC, the ATO or your insurer. Your answers stay on this page. Ready 0 / 6 Answer the questions to see where you stand. 1. Is MFA enforced on email, practice software and ATO online services? The ATO already requires MFA for its online services. Attackers target everything else. Yes Not sure No 2. Are client ID documents kept in one secured location, not in inboxes and on desktops? Scattered KYC documents are the hardest to protect and the easiest to leak. Yes Not sure No 3. Could you retrieve a client’s KYC records from five years ago? AML/CTF requires records to be kept for seven years. Yes Not sure No 4. Do staff verify bank-detail changes by phone before acting? Payment redirection scams target firms that move client money and pay suppliers. Yes Not sure No 5. Are Microsoft 365 and practice data backed up, with a tested restore? Microsoft does not back up your data for you by default. Yes Not sure No 6. Is there a written incident response plan, including Notifiable Data Breaches (NDB) reporting? Work it out before a breach, not after. Yes Not sure No ## What’s included in IT support for accounting firms ### Everything accounting firms need, from one Perth team. ![An accountant’s desk with two monitors showing spreadsheets, a calculator and a row of lever-arch files.](https://ccp.com.au/_astro/feature.DARkWeqS_Z1OGsC4.webp) - #### Helpdesk & device management Unlimited support for partners and staff. Laptops encrypted, patched and wipeable if lost. - #### Identity & access MFA across Microsoft 365, practice software and ATO portals. Access removed the day someone leaves. - #### Secure client documents Client portals and encrypted email, so ID documents and financials stay out of inboxes. - #### Records retention & backup Seven-year retention for KYC records, plus restore-tested backups of Microsoft 365 and practice data. - #### Email security Filtering, impersonation protection and SPF, DKIM and DMARC records, so nobody can send email that passes as yours. - #### Policies & evidence pack IT controls for your AML/CTF program, an incident response plan and privacy policy support. ## Reviews from long-term managed IT clients ### Trusted by Perth organisations since 2000. Local engineers, long relationships and a lot of referrals. That only happens when the work holds up. [Read more client reviews](https://ccp.com.au/reviews/) > “We have found CCP to be a very pro-active company… very knowledgeable and able to identify issues quickly and resolve them with great efficiency.” **Wendy Vaughan** · Long-term client > “I have used them for many years and have referred them to many of our clients. They are professional, super knowledgeable and proactively make sure that the IT side of my business always works.” **Rueben Taylor** · Google review ## Accounting firm IT questions ### What partners ask us about AML/CTF and software. Something not covered? Call [(08) 9467 2269](tel:+61894672269) and ask an engineer directly. ### Does AML/CTF change our IT obligations? The Act is about customer due diligence and reporting. But you must keep records for seven years and protect them under the Privacy Act. That’s an IT job: where records live, who can reach them and how they’re backed up. We don’t give AML/CTF legal advice. We make sure the systems behind your program hold up. ### Do you support our tax and practice software? We look after the devices, accounts and access around it: MFA, integrations with Microsoft 365 and performance. When something breaks, we work directly with the vendor. ### Who has access to our systems? Your helpdesk, engineering and admin accounts stay with CCP staff in Perth. For 24/7 threat detection and containment we partner with a specialist security operations centre. We document all of this for your auditors, your insurer and your privacy policy. ### We’re a small firm. Is managed IT worth it? Regulatory expectations don’t scale down with headcount. Pricing is per user, so a small firm pays for a small firm. If a lighter option suits you better, we’ll tell you. Our minimum is 10 seats.