1 min read
Best Practices for IT Service Providers Running SOC 2-Compliant System
Accountants today should be considering cybersecurity infrastructure and data protection as critical as actually filing their clients’ tax returns...
3 min read
Jordan Hetrick
:
May 9, 2026
The reality is this: certification covers functionality, not infrastructure. Lack of understanding of infrastructure is where the real technical risk lies.
Quickbooks Desktop ProAdvisor certification ensures that a user knows how to operate the software effectively. They can generate reports, reconcile accounts, and troubleshoot common user-level issues. What it does not address is the security of the environment where QuickBooks Desktop is deployed.
We routinely encounter firms where certified users are unknowingly working in systems with:
Certification doesn’t cover cybersecurity frameworks, yet accounting systems are prime targets for ransomware and data breaches. The gap between “knowing QuickBooks Desktop” and “securing QuickBooks Desktop” is significant and often overlooked.
Whether QuickBooks Desktop is hosted on a local server, a third-party cloud provider, or a hybrid setup, the infrastructure decisions behind it carry real consequences.
Many CPA firms rely on internal staff or ad hoc vendors to “set up” QuickBooks Desktop hosting, assuming that it’s straightforward. As a result, here are the detrimental scenarios we’ve seen in real-world environments:
QuickBooks Desktop certification doesn’t teach how to architect resilient systems. That’s the domain of IT professionals who understand uptime requirements, failover strategies, and cloud best practices.
When something goes wrong in QuickBooks Desktop, it’s often blamed on user mistakes. But in our experience, many issues stem from underlying technical problems.
Examples include:
Certified users may know how to spot inconsistencies, but they’re not equipped to diagnose root causes at the system level. Without proper IT oversight, these risks can silently build up until they become critical business failures.
CPA firms are under growing pressure to maintain compliance with data protection regulations and client confidentiality standards. QuickBooks Desktop certification doesn’t address regulatory frameworks like:
Yet these are precisely the areas where firms face legal and financial exposure. A misconfigured system or unsecured remote connection can lead to breaches that certification alone cannot prevent.
One of the most common misconceptions we encounter is the idea that once QuickBooks is installed and working, it requires minimal ongoing attention.
In reality, maintaining a secure and efficient QuickBooks Desktop environment requires:
Certification doesn’t prepare users for lifecycle management. Without proactive IT support, systems gradually drift into risky territory.
The most successful CPA firms we work with recognize that QuickBooks Desktop expertise and IT expertise are complementary, not interchangeable.
When accounting teams partner with managed IT providers, they gain:
It’s not about replacing certified professionals but rather supporting them with the technical infrastructure they were never trained to manage.
QuickBooks Desktop certification is valuable, but it’s only one piece of a much larger picture of what it means to run a successful CPA firm. It ensures professionals can use the software effectively, but it doesn’t address the technical risks associated with operating Quickbooks Desktop in a real-world environment. From cybersecurity to infrastructure to compliance, the gaps are where problems and liabilities tend to emerge.
As a managed IT consulting partner working alongside CPA firms, we see our role as bridging that gap. Our goal is to see that your firm’s expertise in accounting isn’t undermined by unseen technical vulnerabilities.
At PK Tech, we are proud to offer 16 years of experience with a focus on accounting firms. We maintain AICPAs SOC 2 Type II attestation, verified through an independent third-party audit of our security and privacy controls. If your firm wants CPA firm IT support that understands accounting workflows and the compliance requirements that come with them, schedule a call with our team.
1 min read
Accountants today should be considering cybersecurity infrastructure and data protection as critical as actually filing their clients’ tax returns...
1 min read
Starting a new business comes with a long checklist—opening bank accounts, setting up payroll, registering with state agencies, and obtaining a...
1 min read
The month of April is probably the best time to remind our CPA friends of their importance in the world of business and beyond. Accountants are the...