The relevance of network security in accounting firms and strategies to strengthen network infrastructure

Abstract

In today's society, we observe a growing wave of cyber attacks and the ransomware-as-a-service (RaaS) model, in which codes are sold by specialized gangs to other hackers to target companies. Therefore, it is imperative for companies to implement security policies and raise awareness among their employees about good cybersecurity practices, as one of the most efficient attack vectors is the human element. This article aimed to identify how accounting firms perform cybersecurity, as well as to emphasize to companies the importance of cybersecurity and mention tools to enhance it. To conduct the research, phone contact was made with accounting firms located in Recife, Brazil, during July 2023. With the necessary permissions, questions were asked that led to the data presented in this article. The research results showed that the majority of firms outsource their IT departments. In comparison to what will be shown, it is the most sensible decision to be made, since accounting firms deal with sensitive data from other companies and clients. The tools mentioned in this article are open-source projects, where any individual can use them at no cost or license, such as PFsense, Zabbix, Veeam, Wazuh, Snort, and OpenVAS. Additionally, conducting intrusion tests to ensure and certify the security of the corporate network is recommended. It is concluded that initially, there is no need for a significant investment in top-tier tools to ensure the security of information and network infrastructure.