Microsoft 365
4 areas covered
- SharePoint and OneDrive engagement folders scoped by role
- MFA, Conditional Access, and administrator access controls
- Managed endpoint protection on supported devices
- Update schedules planned around filing deadlines
Keep client records secure through filing season
Seasonal access, urgent client requests, and a predictable filing calendar put pressure on the same controls every year.
Security Stack
Closed engagements can leave open access behind
Accounting practices have to protect confidential client information while partners, staff, and seasonal preparers need different access at different times. The first job is knowing who can reach what and closing access when the work ends.
Access
Match access to the engagement
Where client folders live in Microsoft 365 or Google Workspace, access is limited to the people assigned to the work. External links and inherited permissions are reviewed when the engagement closes.
Sign-in
Protect every named account
Multi-factor authentication, administrator controls, and sign-in policies protect staff accounts. Shared mailboxes are reached through named user accounts so access can be removed and traced.
Devices
Secure the devices used for client work
Supported laptops and phones receive managed endpoint protection, encryption, and security updates. Alerts are reviewed by a person who can investigate and coordinate the next action.
Email
Reduce impersonation and payment fraud
Email controls filter common phishing and impersonation attempts. Domain protection and payment-change procedures can be added where the practice needs stronger controls around outbound trust and financial requests.
Calendar
Plan routine work around filing deadlines
Patching, configuration changes, and planned maintenance follow an agreed schedule. Known filing deadlines are considered before routine work is placed on the calendar.
Recovery
Know exactly what the backup covers
Microsoft 365 or Google Workspace data is backed up independently and tested for recovery. Tax applications, local working papers, workstations, and file servers need a separate backup and recovery scope.
Business Value
What the program does for your practice.
The practical goal is straightforward: keep client data controlled, reduce avoidable disruption during filing season, and have current evidence when a client or insurer asks.
01
Control client access
- Engagement folders limited to the people assigned to the work
- Access reviewed when an engagement closes or a seasonal role ends
02
Reduce seasonal disruption
- Routine maintenance coordinated around known filing deadlines
- A documented recovery process for data held in the cloud tenant
03
Answer reviews with evidence
- Current records for sign-in, access, backup, and security controls
- Quarterly reviews that identify gaps, actions, and ownership
What stays yours
The practice still decides how long records are kept and which professional, privacy, and tax requirements apply. Teclara runs and documents the controls in the systems placed in scope. CRA portals, tax applications, and local files remain under the practice or its software provider unless backup, recovery, or administration for those systems is added explicitly.
One managed program that covers the controls below.
Managed Security & Compliance covers the full stack: monitoring, endpoint protection, email security, backup, patching, and platform administration on Microsoft 365 or Google Workspace.
- Human-led monitoring
- A 24/7 security team detects and responds to threats, not just an automated alert.
- Endpoint protection
- Managed detection and response on supported staff devices placed in scope.
- Email and fraud protection
- Controls for phishing, impersonation, and invoice fraud, with suspicious activity reviewed.
- Cloud backup and recovery
- Microsoft 365 and Google Workspace backed up daily, with tested restores.
- Login monitoring
- Cloud sign-ins watched for account takeover, with response following an agreed process.
- Patching and vulnerability management
- Systems patched on a defined schedule, with known weaknesses prioritized by risk.
- Security awareness training
- Ongoing training and simulated phishing to keep the team sharp.
- Tenant configuration
- Microsoft 365 or Google Workspace settings reviewed and updated against the security baseline.
Platform Expertise
Secure configuration for Microsoft 365 and Google Workspace.
We configure the identity, sharing, email, and retention controls your practice relies on, then keep them under review.
Google Workspace
4 areas covered
- Shared drives scoped by engagement role
- Gmail phishing and impersonation protection
- External sharing links reviewed when work closes
- Google Vault aligned with retention policy where licensed
Included
Configuration updates are part of the service. When our security baseline changes, your environment is updated without a separate project fee.
Frequently asked questions.
Can you help with a cyber insurance application or renewal?
Yes. We map the controls in scope to the questions on the insurer form and provide current evidence for sign-ins, endpoint protection, monitoring, backup, and other covered controls. Requirements vary by insurer and policy, so the work supports the application but does not guarantee approval or coverage.
What support is available during filing season?
Security alerts for systems in the managed program follow the agreed response and escalation process around the clock. Day-to-day user support and administration are included only with Managed IT, which is built on the security program. Planned changes are coordinated around known filing deadlines.
Can you take over from our current provider?
Yes. We document the current environment, confirm responsibilities, and coordinate the security transition around the practice calendar. If you want to delegate day-to-day IT as well, Managed IT includes the security program and adds user support, device administration, onboarding, and platform management.
What documentation do you provide?
Reporting can include sign-in and access records, backup and restore evidence, patching and vulnerability status, alert response records, and written control descriptions. The exact set follows the systems and services in scope. It supports client, insurance, or professional reviews but does not replace legal or accounting advice.
Do you support both Microsoft 365 and Google Workspace?
Yes. We secure accounts, administrator access, email, sharing, supported devices, and independent backup on both platforms. Available controls can depend on licensing, so we confirm what the practice already has and what the agreed security baseline requires.
Client Feedback
What a client says about working with us.
“Teclara materially improved both our operational responsiveness and our security posture.”
E.C.
Senior Leadership, GTA Consulting Firm
Led by Wadhah Hussain, Teclara's founder
20+ years enterprise IT · Big Four alumnus · Microsoft & Google Cloud specialist
Review the practice before the filing calendar gets crowded
We review sign-ins, administrator access, mail flow, sharing, device coverage, and backup in your Microsoft 365 or Google Workspace environment. You receive written findings and priorities whether or not you hire us.