The Impact of Cybersecurity Regulations on Accounting Firms
While we’re biased given our line of work cybersecurity is undoubtedly an urgent issue for businesses across all sectors. Given its reliance on both...
4 min read
Jordan Hetrick
:
December 11, 2025
Every time a new standard or technology hits the CPA industry, it has the power to reshape tax workflows, data governance, and professional responsibilities.
The revised Statements of Standards for Tax Services (SSTS) Section 1.4, issued by the AICPA, is one of the most impactful updates in recent years, especially as firms increasingly rely on automated tools, cloud platforms, and AI-enhanced systems.
In this article, we break down:
SSTS Section 1.4. part of the newly revised SSTS No. 1, provides guidance on a CPA’s responsibilities when using tools or technologies that automate or support tax compliance and advisory work.
The standard emphasizes that while technology can streamline tax processes, the CPA remains professionally responsible for the outputs used in tax returns or advice. In other words: tools can assist, but they cannot replace a CPA’s obligation to exercise professional judgment, maintain data accuracy, or verify results.
At its core, Section 1.4 focuses on three areas:
The term tool is intentionally broad to reflect the range of technologies modern CPA firms use. Under SSTS Section 1.4, a tool includes any system, application, or automated process used to gather data, perform calculations, analyze information, or generate tax-related output.
Examples include:
Importantly, a “tool” does not need to be an AI system. Even basic tools, such as automated depreciation calculators or bank feed imports, qualify. The standard applies regardless of whether the technology is simple, complex, vendor-provided, or built internally.
Although tools can dramatically improve efficiency, SSTS 1.4 reaffirms that CPAs must maintain oversight and control. The standard outlines several key responsibilities:
CPAs must understand what the tool does, its limitations, and the nature of the source data it relies on. This includes being aware of underlying assumptions and any known risk factors.
Relying on a tool is acceptable only if a CPA determines that the tool is appropriate for the engagement and the circumstances. Blind reliance is not permitted.
Factors to consider include:
Before using the tool’s results in tax filings or client advice, CPAs must review the output for accuracy, reasonableness, and consistency with known facts.
While SSTS doesn’t mandate specific documentation procedures, firms should maintain internal records of their reliance decisions, especially for complex or high-risk processes.
To help firms understand how Section 1.4 applies in practice, here are real-world examples we commonly see when advising CPA firms on IT systems and workflow optimization.
A CPA uses a well-established tax preparation platform (e.g., UltraTax, CCH Axcess, or ProConnect) to calculate depreciation. The CPA:
Why this is reasonable: The software is reputable, designed for the purpose, and the CPA validates the key assumptions.
A firm uses a secure cloud portal that extracts client responses and uploads them into the tax software. The CPA:
Why this is reasonable: The tool automates data transfer, but the CPA still reviews and evaluates the output.
A client’s payroll service (e.g., ADP, Gusto, Paychex) provides year-end payroll summaries. The CPA:
Why this is reasonable: Payroll providers are specialized systems, and the CPA performs appropriate verification steps.
A firm uses AI to extract 1099 data from scanned documents. The CPA:
Why this is reasonable: The CPA understands that AI extraction may have errors and performs a proper review before reliance.
As a managed IT partner for CPA firms, we help ensure that the technology you rely on meets compliance expectations.
A well-designed IT environment not only enhances efficiency but also strengthens your firm’s ability to reasonably rely on tools while maintaining compliance.
SSTS Section 1.4 formalizes what most CPAs have always known: technology can make tax work faster and more accurate, but it doesn’t replace professional judgment. By understanding what tools do, evaluating their reliability, and reviewing their output with care, firms can confidently integrate automation while staying compliant.
As CPA firms continue to scale services and adopt more advanced technologies, aligning IT practices with SSTS Section 1.4 isn’t just recommended, it’s absolutely essential. CPA firms that are attempting to do this without the help of qualified IT professionals, in most cases, are not achieving compliance at all.
Our team at PK Tech is here to help ensure your systems, processes, and automations support both your productivity and your professional standards. Schedule a complimentary consultation with one of our IT experts here.
While we’re biased given our line of work cybersecurity is undoubtedly an urgent issue for businesses across all sectors. Given its reliance on both...
Like paying your taxes, running payroll is a process almost every organization has to do. Effective payroll management is crucial for organizations...
Accountants today should be considering cybersecurity infrastructure and data protection as critical as actually filing their clients’ tax returns...