AI Adoption in CPA Firms: Why Zero Trust Must Come First

Presented to the CPAmerica Technology Roundtable on July 16, 2026. Thank you for joining us!

Firms are told to adopt AI and protect client data — with almost no guidance on how to do both.

What's Inside

Built specifically for CPA firm leaders — no generic IT filler. Six sections, plus a practical action plan.

• The AI Governance Problem — Adoption trends, the "compliant out of the box" myth, shadow AI, and how attackers are now weaponizing AI (including the first documented case of agentic ransomware).
• The Zero Trust Framework — What zero trust actually means in practice, and the identity, device, and segmentation controls that enforce it.
• Infrastructure Foundation — Why centrally managed environments beat local AI access — plus the exact questions to ask your IT provider.
• Governance & Compliance — FTC Safeguards Rule, IRS Pub 4557, GLBA, and NIST, and how to update your WISP for AI.
• DLP Deep Dive — Extending data loss prevention to prompts, uploads, and connectors — and what a firm-side redaction layer looks like.
• From Experimentation to Adoption — A phased roadmap, common pitfalls, cyber-insurance shifts, and action items you can start this week.

Learning Objectives: 

• A clear framework for evaluating, governing, and scaling AI adoption without risking client-confidential data.
• A checklist of questions to hold your MSP or internal IT team accountable.
• The specific WISP updates and compliance mappings regulators and underwriters now expect.
• A 30/60/90-day action plan — starting with the single most important first move.
• The vocabulary to align partners, IT, and compliance around one plan.