Carla McCall Featured in FM Magazine on Finance Roles in Cybersecurity

FM Magazine Report: 5 emerging business cyberthreats — and how to combat them

FM Magazine (October 2025) – From deepfakes to payment fraud, companies are at risk of increasingly complex cyberthreats—with finance taking a leading role in mitigating risks. Carla McCall, CPA, CGMA, Managing Partner of AAFCPAs, contributed insights into five emerging business cyberthreats and the steps organizations may take to reduce exposure.

In this annual report, FM Magazine examines how finance leaders strengthen cybersecurity readiness and the growing need for disciplined governance, well-designed internal controls, and coordinated oversight as cyberthreats evolve in complexity.

The report outlines how attackers blend advanced technology with social engineering to impersonate executives, infiltrate systems, and pressure finance personnel into authorizing fraudulent transactions. Deepfake video calls, AI-generated invoices, ransomware, cloud-based breaches, and vendor vulnerabilities feature heavily in its analysis. Finance teams sit at the center of these risks because they manage payments, oversee vendor relationships, and maintain the processes criminals often try to exploit.

Carla noted that organizations strengthen resilience when leaders reinforce internal controls and maintain consistent adherence to established procedures. She emphasized that bypassing controls or failing to monitor activity leaves companies exposed. Her perspective aligns with the report’s broader message that prevention, regular training, and strong oversight are essential as finance functions take on a larger role in cybersecurity resilience.

For CFOs and controllers, this shift places greater responsibility on governance, vendor management, and cross-functional coordination. The report underscores foundational steps that reduce exposure, including reliable patching practices, secure configurations, robust authentication, and detailed logging that allows teams to detect unusual activity. It also highlights the need for clear communication across functions, particularly as attackers exploit both technical and human gaps.

Readers of FM magazine will find a detailed examination of these issues along with perspectives from leaders in cybersecurity and finance. The report reinforces an important trend for senior finance executives: cybersecurity readiness is now a core element of business resilience, and finance plays a central role in ensuring continuity and confidence.

How We Help

AAFCPAs’ Risk & Cybersecurity Advisory practice supports organizations looking to strengthen governance, reinforce internal controls, and address cybersecurity threats with clarity and confidence. Our cross-disciplinary risk and cybersecurity advisory team helps leaders assess vulnerabilities, refine oversight, and align safeguards with strategic goals. We evaluate risks across financial reporting, technology, operations, and third-party relationships, offering practical guidance on remediation and process improvement. Think collaborative learning across finance and IT functions, supported by structured risk assessments, internal control consulting, IT governance reviews, and enterprise risk management frameworks built to match the scale and complexity of your environment. We also assist with specialized needs, including SOX readiness, SOC reporting, HIPAA compliance, ISO 27001 preparation, and cybersecurity program development. By connecting risks to business objectives and designing solutions that fit your pace of change, we help organizations make informed decisions, protect critical systems and data, and strengthen resilience in a landscape where threats evolve quickly.

Questions? Reach out to your AAFCPAs partner.

AAFCPAs offers a wealth of resources on managing risk and strengthening controls. Subscribe to get alerts and insights in your inbox.