Tax and Accounting Document Delivery

Transcription

1 Tax and Accounting Document Delivery

2 Encrypting PDF Files in Attachments: Reduce Risk, Automation and Compliance

3 Administrative Items 90 Minutes (Education, Demo, Q&A) Participants are muted. Please ask questions through the GoToWebinar Control Panel 10% Discount to all attendees Eligible to Receive 1.5 CPE Credits Register at Logged in for 75 minutes Answer 5 of 6 polling questions CPE Certificate will be issued in 2 3 business days Check spam & junk, then login to your account ipad and iphone viewers beware

4 cpaperless, LLC Paperless tools for the tax & accounting industry Products Prepare Send E-Sign 2,500+ Customers and 20,000+ Licensed Users Steve Dusablon President & CEO (800) x 110 Steve.Dusablon@cPaperless.com

5 Compliance Breach of Privacy Laws & Security Options for Secure File Exchange How PDF Encryption Works Webcast Agenda Webcast Agenda Reduce Risk Password strippers & password crackers Best practices Issues with Encrypted PDF Files Automation SafeSend demonstration Q&A

6 Compliance

7

8 Breach of Privacy Laws Tax & accounting firms handle confidential information Your firm has exposure As world becomes more paper conscious, electronic transfer requests will increase This will magnify your exposure in the future What should you do? State Laws Federal Laws AICPA guidelines Fiduciary obligation to your clients and your firm What you choose to do Education on laws, encryption and security Evaluating the right encryption and file transfer solution for your firm

9 Options for Secure File Exchange Client Portals Tax vendors, DMS s, website hosting companies, etc. If you don t use a Portal already, someone has tried to sell you one Positioned as the utopia of delivery mechanisms and online storage File Transfer Solutions Archived Webcast Why Client Portals Fail: Understanding File Transfer Solutions Less than 35% of your clients will adopt these systems Password authentication, download links removed by Firewalls Encrypted PDF Files in Attachments

10 Why People Use PDF Encryption Low Portal Adoption Rates Encryption Manually applied with Acrobat Standard or Professional, or Acrobat alternative Uses RC4 or AES password based encryption (40, 128 or 256-bit available) Application can be automated Files sent through regular as attachments Decryption Recipient can decrypt with Adobe Acrobat Reader (FREE Version) Widely distributed, FREE, pre-installed on most computers & devices Firms leverage this to their benefit Easy to use, clients are familiar with it, and most people already have the software Automating PDF encryption was the foundation of SafeSend

11 How PDF Encryption Works

12 How PDF Encryption Works

13 How PDF Encryption Works

14 How PDF Encryption Works 1) Document Open Password Use for Client Password Applies the encryption selected below 2) Permissions Password (Edit) Locks file from editing, printing, etc. Use to open from your sent items folder 3) Encryption Type Recommend 128-bit or 256- bit AES Encrypt all document contents

15 Reduce Risk

16 Password Strippers & Crackers 1) Document Open Password Can NOT be removed Can be guessed through brute force attacks 2) Permissions Password (Edit) Removed in < 1 second Cause of misconception of PDF files Two Ways Into This File Break encryption Enter the correct Document Open or Permissions password Applied Encryption 3) Encryption Type Be careful of DMS solutions that apply 64-bit

17 Password Strippers & Crackers Configured for 8 digits only Uppercase, lowercase & numbers 218,340,105,584,896 combinations 35+ years

18 Password Strippers & Crackers Configured for 8 12 digits Uppercase, lowercase, numbers & special characters 13,605,133,066,289,930,723 combinations 2.5 MM+ years

19 Password Strippers & Crackers Risks of embedding password hints in text body What Lacerte Tax Does

20 Password Strippers & Crackers Risks of embedding password hints in text body Lacerte Tax Last 4 digits of your EIN and 5 digit Billing Zip code 9 digits all numbers Provides password hint in text body Full SSN or EIN with no spaces or dashes 9 digits all numbers DMS and File Cabinet Solutions First 4 of last name followed by last 4 of SSN / EIN 8 digits First 4 are letters (upper or lower) Last 4 are numbers Some use 64-bit encryption

21 PDF Encryption Best Practices Document Open Password Can NOT be removed, but can be guessed Use for clients password Use 8 12 characters Include combination of uppercase, lowercase, numbers & special characters Permissions Password IMPORTANT: Only use if Document Open password is also used Easily removed Use as your backdoor access to files in your Sent folder Adhere to strong password requirements Apply 128-bit or 256-bit AES encryption

22 PDF Encryption Best Practices Avoid using password hints in text body Allows hackers to configure password strippers If using standardized passwords Create standard convention (first 4 last name + last 4 of SSN) Communicate with clients before sending files (phone or ) You can store in CPA Saf password manager for future use Resend from Outlook if they forget Randomly or manually generated & send in secondary Risk of both being intercepted in transfer is remote Risk is that someone has access to your clients account They have bigger issues No solution is perfect, nor will it provide for 100% adoption Our Opinion: This an acceptable level of risk to your firm

23 Problems With PDF Encryption

24 Problems With PDF Encryption No solution is perfect, nor will it obtain 100% adoption Time consuming & error prone Subject to password strippers and crackers Does not encrypt text body of , just the attachments Can t send Excel or Word files in their native format Clients can t remove passwords File size limitations

25 Problems With PDF Encryption Automating PDF encryption was the foundation of SafeSend Remains an important part of our program Technology changes in the marketplace you can t control Operating Systems & Browsers MAC Preview, Windows 8 Google Chrome Links in PDF files don do not function Web based (i.e. Yahoo mail) Files will not open Causes Frustration It s going to get worse in the future Discouraging for people relying on encrypted PDF files for secure file exchange

26 Yahoo Mail

27 MAC Preview

28 Summary Daily File Sharing is more complicated than most people think Can t rely on a single method of delivery You need to use both options (PDF Encryption and Links) Neither option is perfect, they both have problems Client Problems PDF Files: Issues with proprietary viewers, Internet, and mobile devices Links: Clients forget passwords and links get stripped by many firewalls If you only use one method, then you will always have problems Staff Problems Does the recipient use a Mac or Windows 8? Does the recipient use web-based ? Is the recipient accessing the files from a mobile device? Does the recipient work for a bank, financial institution or government agency? How often do I send to this recipient? Will they remember their password? It all leads to frustration

29 Our Approach to Solving the Problem Links Highest success rate, easiest for the recipients to download files Work best for mobile devices Link Authentication Options No Authentication (Easiest) Compliant, but not secure Question & Answer (QA) authentication (Most popular and recommended) Examples: Last 4 of SSN, 10 digit cell phone, 5 digit ZIP code, etc. Portal Login (Most secure) Only recommended for high frequency clients (Bookkeeping, payroll, etc.) Encrypted PDF files Use when sending to bankers, financial institutions and governmental agencies Only SafeSend offers both delivery methods, and all three authentication options, in a single solution

30 Daily Transfer Cheat Sheet Recipient Link (QA) Link (Portal Login) Encrypted PDF Average Client Mac User? Recommended No No Windows 8 User? Recommended No No Mobile Device Access? Recommended No No High Frequency of Transfer Bookkeeping, QuickBooks, Payroll, Corporate, Business Management Yes Recommended Yes Links Stripped by Firewalls Banks No No Only Option Financial Institutions No No Only Option Governmental Agencies No No Only Option

31 Automation

32 A Tax and Accounting Document Delivery Solution SafeSend is the foundation of the suite of products Why Use SafeSend? It s EASY for staff and clients Achieve Higher Adoption rates Clients can have a hard time remembering passwords so SafeSend uses an easy yet secure question and answer authentication method. More unique features Multiple delivery methods E-Signature Integration Automated PDF Encryption Tax & Accounting Specific Features & Add-ons

33 Unique Tax and Accounting Document Delivery Add-ons Available for past 2 years E-Sign any document, anywhere, anytime. Batch process Engagement Letters for E-Signature In development (2015 Release) Batch process Organizer distribution The only tax return delivery system that can meet all the process and E- Sign requirements for staff, clients and the IRS Allow clients to electronically distribute K-1 s to their shareholders

34 PRODUCT DEMONSTRATION

35 Webcast Summary Encrypted PDF files in attachments Many people do it We re encouraging people to move away from it where possible Compliance Breach of Privacy Laws your firm has exposure Client Portals & File Sharing solutions have limited adoption PDF encryption has increasing issues Use both Reduce Risk Adhere to best practices to mitigate the risk of password strippers / crackers SafeSend Complete file transfer solution Send links with QA authentication as primary transfer method Automated PDF encryption as needed

36 System Requirements Staff Microsoft Outlook 2007, 2010 or 2013 Microsoft Office 2007, 2010 or 2013 Internet Connection Citrix or Terminal Server compatible Clients Internet Connection Access Adobe Acrobat Reader 7.0 or higher (Free version)

37 Next Steps FREE 30 Day Trails Available to all members of your company Contact Us: Web: Phone: (800) x 100

38 Q&A