You are the trusted advisor

The accounting professional has always been seen as a business advisor - a trusted partner that understands the conditions that impact business performance. This advisor not only reports on the business performance, but may make recommendations or judgments on certain situations or processes that are key to the business model. Leveraging your direct participation in your clients' financial systems can be a very successful component of practice building - mining out other opportunities that may exist in current client engagements.

In some cases, your clients will want to process their own bookkeeping in-house. Rather than taking a hands- off approach to these clients, engage them by providing training or consulting services to support their in-house bookkeeping.

If your firm provides real-time guidance and reviews, the quality of the financial information is far better and requires less work to adjust and report. Ultimately, saving your client time and money will reward your practice with more opportunity to engage the client in other efforts.

Protecting Yourself Against Data Theft

by Michael Ehart, CISSP, etc.

There has been a rash of reporting of data theft lately that has a very strange effect of causing many to become complacent about their data protection measures because, after all, their system is working.

The problem is that there is no way to know if your data is bulletproof. You can only be certain when it is not, and you have evidence that your security has been breached. The vast majority of data theft is undetectable and unprosecutable, because unlike physical theft the stolen data is still there. If someone sneaks into a museum in the dead of night, dressed in spandex and night goggles and makes off with a Bottecelli, in the morning there is a big square of unfaded wall, an empty nail, a light dusting of tracked-through laser-detection talcum powder and no painting. The problem with stolen data is that most of the time there is no way to know that your system has been breached, or if it has been, that anything is missing because nothing is actually missing.

So what do you do to keep your data secure? The threats come in three flavors, and there are steps that you can take to protect yourself from each one.

1. The Barbarians at the Gates. There are people out there who don't like you. There are people out there who don't care about you, but want what you have. And there are people out there who don't care about you, or what you have, but want inside just because they can. These are the folks that firewalls were invented to thwart, and I assume that you have covered this loophole. Firewalls, encryption, strong passwords, and some sort of Intrusion Detection System (IDS) cover you there. If you don't understand or like this stuff hire someone who does. A competent IT security consultant can set up most small practices in a few hours of system hardening. Do make sure that the contract includes some basic training for your users concerning the changes and best practices.

2. The Enemy Within. Far more likely to cause you grief is the viper cherished in your bosom. No one knows for sure, but I would guess that the retail model applies here--- 90% internal theft. After all, who else holds the keys to your kingdom? Training, monitoring, set usage policies and careful terminal check-out procedures can help, but you never know. If you have 20 employees and they all seem perfectly content, either you are the shining example all other bosses should aspire to or at least 5% of your workforce is adept at hiding their dissatisfaction. I know which one seems most likely to me.

3. Stupid is as Stupid Does. And Stupid seems to be doing more than his fair share lately. Data theft is the classic crime of opportunity. "It was just laying there, so I took it." Or "The web site was unsecured" or "The safe was left open" or -one that I recently was asked about- "I left the box of records in the back seat, and someone borrowed my car." I love consulting, but dang, please make it harder for me, will ya? No more post-it notes with passwords conveniently stuck to the monitor, or so cleverly stuck under the keyboard. No more backup tapes on a shelf behind your desk, or stacked on top of the server. No more shared passwords for the entire office. Once again, if you don't know about this stuff contract someone who does. It is so very much cheaper and less stressful to spend a few bucks and a few hours hardening your system and providing a few hours of common sense training for your crew than it is to learn about your data disclosure from the guy with good hair and too many teeth holding the mike and standing sideways in your lobby so his cameraman can get a good shot.

InsynQ e-Accounting takes information security and confidentiality very seriously. In fact, one of our engineers is a Certified Information Systems Security Specialist (CISSP) and carries certifications as a HIPAA Professional and HIPAA Security Specialist (among other things). Visit Michael Ehart's HIPAA blog Comply With Me

Power to the People

Having the information you need when you need it is critical to making the right decisions for your business. The unofficial motto of the information age is "Information equals power", but information trapped inside your computer equals nothing. The key is to not only capture and retain data, but to turn that data into useful information and then make it available to those who need it. This can be more challenging than it sounds, especially when it comes to providing access for remote team members, co-workers or clients.

Unless your business has a competency in technology management, the wise choice may be to outsource the solution to your most challenging technical problems. With application hosting services, for example, you can use the software and systems that your business is already familiar with, and you simply access those systems in a different way. The ASP (application service provider, or host) takes care of the systems, the applications, and the network. Users are able to access their applications from any Internet-connected PC, and are assured that their programs and their data are secure, backed up, and available when they need them.

Equine Accounting: Employee vs. Independent Contractor. Who's Who?

An independent contractor (IC) is someone who provides services to others, outside the context of employment. Examples of possible ICs to an equine business would be a contractor and an attorney. An employee is a person who provides services to a company on a regular basis in exchange for compensation and does not provide these services as part of an independent business. Examples of possible employees to an equine business would be your office manager and daily barn help.
Why is this information important to you? In recent years, the IRS has focused considerable attention on this issue. Classifying a worker as an IC avoids the payroll tax liability and reporting responsibility of having an employee. But misclassification of employees as independent contractors can cause the IRS to levy penalties and interest which could significantly affect your company.
The IRS considers three general categories - behavioral controls, financial controls, and the relationship of the parties.
Behavioral control exists when the company who has hired the worker has the right to control and direct the worker. The company does not have to actually control and direct the worker – only have the right to do so. Behavioral control includes the type and degree of instruction, any training provided and the type of evaluation performed.
Employee IC
Instruction Detailed General
Training Provided Worker uses own methods
Evaluation Ongoing Only end result evaluated
Financial control is measured by the degree of significant investment in the work, unreimbursed expenses, availability of services to the general marketplace and the opportunity for profit or loss. More financial control is usually indicative of an independent contractor.
Relationship of the parties covers factors such as whether the worker receives benefits, the existence of a written contract, permanence of the relationship, and whether the worker provides services which are a key activity of the business.
You may request a determination by the IRS as to the status of a worker by submitting Form SS 8 to the IRS. Be aware that the worker themselves may also file if they feel improperly classified as ICs and are held responsible for payment of employment taxes and denied benefits. The IRS will investigate the claim and you may be held responsible for all employment taxes as well as significant penalties and interest.
What is your responsibility as someone who hires an IC? If you anticipate that your annual payments to this vendor will meet or exceed $600, before commencement of work, you should obtain a signed W-9 Form. At the end of the year, you are responsible to complete a 1099 Misc Form for each unincorporated vendor meeting the $600 or more threshold. Submit a copy to the vendor by Jan 31 of the following year and a copy to the IRS by Feb 28.
If you determine the worker to be an employee, you are responsible for withholding and submitting to the IRS income and FICA taxes and paying unemployment taxes. You must also submit periodic reports regarding these withholdings and payments to the IRS. There is a lot of record-keeping involved and if you are not familiar with this process, it would probably be in your best interest to outsource the payroll. QuickBooks offers several affordable payroll solutions.
Prepare now for several proposed changes to 1099 reporting which include
Payments to corporations would now require a 1099 form when they exceed the $600 limit.
IC would be subject to withholding if they do not provide a valid Tax Identification Number.


IRS Publications 1779 and 15A on IC/Employee classification provide more detailed information on this issue and can be found at http://rs6.net/tn.jsp?t=ul9id6cab.0.0.tnz777cab.0&p=http%3A%2F%2Fwww.irs.gov%2F&id=preview.