IRS and Security Summit Partners Stress Importance of Multi-Factor Authentication for Tax Professionals

It's not just a good idea anymore - using multi-factor authentication (MFA) is now a federal requirement for tax professionals. This extra layer of security is crucial in protecting sensitive client information and reducing the risk of data breaches and fraud.

This is the fifth week of the "Protect Your Clients; Protect Yourself" summer series, part of the ongoing efforts by the Security Summit to safeguard the tax system against identity theft and fraud. The partnership between tax professionals, industry partners, state tax agencies, and the IRS has been working tirelessly since 2015 to combat tax-related crimes.

As part of the Nationwide Tax Forum, happening in various cities across the U.S., tax professional security is a key focus. This event provides valuable education and resources to help tax pros enhance their security measures and protect their clients' data.

Why is MFA Important?

• Enhances security by requiring more than just a username and password for access
• Protects against phishing, social engineering, and other cyber threats
• Required by law under the FTC safeguards rule

Best Practices for Implementing MFA

1. Implement MFA across all services and data access points
2. Regularly evaluate and update MFA methods and technologies
3. Enable MFA in tax software products and cloud storage services

By following these best practices, tax professionals can significantly reduce the risk of data breaches and protect their clients' sensitive information.

Additional Resources for Tax Professionals

• Report any data theft incidents to the local IRS Stakeholder Liaison
• Visit the Federation of Tax Administrators for state contact information
• Review IRS publications on safeguarding taxpayer data and preventing identity theft
• Stay connected with the IRS through e-News and social media subscriptions

What do you think?

• Do you believe MFA should be mandatory for all businesses, not just tax professionals?
• Should the government provide more resources and support to help companies implement MFA effectively?
• Is there a better alternative to MFA for enhancing cybersecurity?