Risk Advisory
Eye on Cyber: A Day in the Life of an Ethical Hacker
“Innovation, organization, and sophistication—these are the tools of cyber attackers as they work harder and more efficiently to uncover new vulnerabilities,” reports Symantec in their 2018 Internet Security Threat Report. Ethical hacking services are a great way for organizations to unearth security weaknesses before they can be exploited by online criminals. In this instructive session, […]
Common Social Engineering Cyber Attacks and Prevention Strategies
What Is Social Engineering & What Are the Risks? The human component of cybersecurity is the weakest link in protecting your organization against external threats. Recently, social engineering attacks have become the most prevalent type of threat within reported cyber breaches. Social engineering is a malicious activity in which bad actors produce items such as […]

AAFCPAs’ Mr. Anderson Earns Certified Ethical Hacker Credential
AAFCPAs’ “white hat” ethical security hacker and business continuity advisor, Mr. Anderson has been awarded the Certified Ethical Hacker (CEH) credential issued by the International Council of E-Commerce Consultants (EC-Council). Mr. Anderson was awarded the CEH credential in recognition of his earned expertise in understanding how to uncover weaknesses and vulnerabilities in target systems and use the same knowledge […]

Year in review: The Top 10 Insights from 2018
2018 was a big year for finance professionals, with monumental changes in tax code & accounting rules, and other significant challenges & opportunities affecting commercial businesses, nonprofits, and individuals & their families. Below are AAFCPAs’ most widely-read news alerts & insights in the past year: AAFCPAs’ 2018-2019 Tax Planning Guide for Businesses & Individuals Financial […]
AAFCPAs to Present Workshop on Internal Controls & IT Countermeasures to Mitigate Risks
AAFCPAs’ Vassilis Kontoglis and David Kelleher will present an educational workshop on Best Practices in Internal Controls and IT Security to assist in mitigating risk at The Massachusetts Association of Early Education & Care (MADCA) Administration and Management Conference, in Worcester, MA on November 28th. Risk Management requires continuous improvement, and organizations must stay vigilant, […]

AAFCPAs Wealth Management Advises Clients to Pursue Lines of Defense in Protecting Your Credit
Approximately 1 in 2 Americans had their personal information compromised as a result of a 2017 data breach at Equifax, and as a result are now at an increased risk for identify theft and financial fraud. Identify theft is an increasing problem for all people. In response, Congress initiated a new credit freeze law protecting […]

Educational Podcast: Cybersecurity in 2018
Listen to Podcast Click here to listen to podcast or use the above media player. Techniques of cyber-criminals continue to evolve. A recent study shared by InfoSecurity Magazine reports “Cyber-criminals have adopted an organizational shift in how they carry out their work, implementing corporate best practices and establishing professional businesses to increase the efficiency of their attacks […]

AAFCPAs to Lead System and Organization Controls (SOC) Reporting Forum for PrimeGlobal, National CPA Firm Association
AAFCPAs’ James Jumes, MBA, M. Ed has been selected to lead the North American System and Organization Controls (SOC) Reporting Special Interest Group (SIG) for PrimeGlobal, an international association of independent accounting firms. James is uniquely qualified to lead this national SIG, which will serve as a forum for peers to share their interpretations and implementations of […]

AAFCPAs Earns SOC for Cybersecurity Services Certificate
AAFCPAs’ Partners James Jumes, MBA, M.Ed. and Robin Kelley, CPA, CITP, CGMA, CSPM, CCSFP have earned the System and Organization Controls (SOC) for Cybersecurity Certificate issued by The Association of International Certified Professional Accountants (AICPA). SOC for Cybersecurity is a new entity-wide cybersecurity audit that allows organizations to voluntarily report on their cybersecurity management programs […]