AICPA Member Insurance Programs

What risk management questions are coming up most often at your firm?

Join CNA Risk Control professionals Kevin Hayes, CPA, and Kathleen Koehl, CPA, for a free webinar and interactive session built around the challenges CPA firms are navigating today. Bring your questions and hear practical insights on engagement letters, client relationships, confidentiality and data security, AI considerations, and managing challenging clients.

Friday, November 6 | 2–3 p.m. EST
Earn 1 CPE hour

Register by November 5th: https://brnw.ch/21x6JCJ

Many client disputes don't stem from poor work. They stem from unanswered questions: What services are included? What's outside the scope? Who is responsible for what? What happens if the engagement changes?

A well-crafted engagement letter can help answer those questions before they become challenges. Beyond documenting services, engagement letters help establish expectations, define responsibilities, clarify deliverables, and create a shared understanding between the firm and client. When expectations are discussed early and documented clearly, firms are often better positioned to navigate changes and maintain productive client relationships. Learn more: https://brnw.ch/21x6I1C

Nearly 300 data breaches involving tax professionals were reported to the IRS in the first half of 2025, potentially impacting as many as 250,000 clients.

The numbers underscore what's at stake for CPA firms entrusted with sensitive financial and personal data. As cybercrime becomes increasingly difficult to detect, prevention is only part of the equation. Firms also need to understand potential exposures, prepare for incidents, and consider how cyber liability insurance fits into their broader risk management strategy.

Learn more about strengthening your firm's approach to cyber risk: https://brnw.ch/21x6Btk

Spooky season isn't just for haunted houses and horror movies. CPAs can face their own “scary stories” too.

An unexpected subpoena. A board complaint. A fraud allegation. A deepfake wire scam. These situations can be unsettling, especially if you are caught off guard or try to handle them alone.

This article looks at real-world scenarios and focuses on how firms can respond and how they can prepare ahead of time:
routing subpoenas through a firm protocol instead of replying on the spot, relying on engagement and termination letters when clients demand “the file,” treating suspected fraud with the right mix of professional standards and carrier notification, and following a written playbook when wires or client data may have been compromised.

Having a plan, clear boundaries, and the right support can help make even the scariest situations more manageable. Read more: https://brnw.ch/21x6y7a

A message from our Liberty Mutual Insurance partners: Fall is a good time to rotate your tires for even wear before winter. And to make sure your insurance policy still fits your needs. Reach out at (877) 922-4272 or visit https://brnw.ch/21x6wsf.

An urgent client request can look legitimate, especially when it arrives during a busy day. But small details can signal something isn’t right.

Deborah Rood of CNA Insurance recently shared her cybersecurity insights with the Minnesota Society of CPAs, outlining practical ways CPA firms can strengthen security practices and reduce exposure to fraud. Her guidance is simple but important: slow down, verify unusual requests and make sure established security protocols are followed consistently.

Read more: https://brnw.ch/21x6sY9