An information security and cyber policy for a practice holding client financial and personal data – access, MFA, devices, backups, email and payment fraud, client portals, AI tools, suppliers, remote working and breach response – with an asset register and incident log.
Accountancy practice – compliance & management
Information Security and Cyber Policy for Accountancy Practices
About this document
A practical information security policy for an accountancy or bookkeeping practice. It sets the controls that protect client data and the firm’s systems, how staff must behave, and what happens when something goes wrong, including reporting personal data breaches to the Information Commissioner within 72 hours where required. It supports the firm’s duties of confidentiality, the UK GDPR security principle and the expectations of professional bodies and insurers.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
Accountancy practice – compliance & management
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
