In this issue…

The publication of the AITUK,
the association for
Accountancy IT Directors
May 2015
#
In this issue… Two Critical Ways to Reduce Your Exposure to Cyber Attacks
Collaboration Tools
and Enterprise Social Networking
www.aituk.co.uk
Welcome
JimGreenfield
The first Technical Meeting of the year, held at our usual
British Computer Society was attended by various members
and suppliers covering different topics. The content of the
presentations covered many of the areas that are high on the
list of concern to member firms with the feedback scoring
them well. Moving forward, we are looking towards the June
Technical Meeting where the audience will be updated
by Practice Engine, PointBeyond, Gamma, Huddle, Wolters
Kluwer and Egress. Planning for the Annual Conference is well
underway; we are very much looking forward to working with
all of the confirmed sponsors to ensure it is another varied and
informative event. We should all remember that the interaction
between the group’s members is what makes it such a success.
Over the last seven years we have grown from informal
gatherings for IT Directors only, to technical meetings open to
a cross section of technical and managerial staff. In addition
to this the 2015 conference will provide 2 days to network
with other AIT UK members, suppliers, old friends and some
new ones. It would be great if we can increase the input from
member firms, so if you are able to provide a presentation on a
recent project, or help lead a discussion do let us know. 2015 is
going to be yet another busy year for AIT UK and I look forward
to welcoming you at the varied events we host.
Contents
4
Two Critical Ways to Reduce Your
Exposure to Cyber Attacks
7
Cryptshare AIT Presentation
Review
8
Thomson Reuters Launches Digita Practice Advanced
10 Collaboration Tools
and Enterprise Social Networking
11 AITUK Meeting Dates
PortrAIT is published by PSITUK Ltd. You may print or forward PortrAIT to other parties providing it is
not changed or amended in any way. All content remains copyright of the publisher and/or authors. No
content may be reproduced in any other form without the express permission of the publisher.
The views expressed in PortrAIT are not necessarily those of the publishers. The publishers accept no
responsibility for the accuracy of the information within this publication, but will endeavour to publish
corrections if information is subsequently found to be inaccurate. If you are concerned about the
accuracy of an article please contact the publishers (details below).
PSUKIT Ltd is registered as a company in England and Wales, registered number 07145002.
Contact for all enquiries: [email protected] Tel: 01582 872597.
2
13 Thomson Reuters Digita conferences guide accountants towards success through technology
#AIT_UK
www.aituk.co.uk
Supportingyourcolleagues
astheytransitiontoFRS102
How Wolters Kluwer technology can help
FRS 102 represents the most significant change to accounting standards for many years.
Over the past 18 months our technical experts and software engineers have been developing
ways to help accounting professionals transition to the new standards.
Help from CCH Software
Whetherit’screatingaccountsfromscratchortaggingaccountsproducedinanothersystem,
we make the job as simple as possible with software that’s easy to support and update.
CCH Accounts Production is a highly efficient, final accounts production system which is fully compliant
with FRS 102 for all company sizes. CCH Accounts Production allows you to customise the look and feel
of the final accounts without editing the formats, making it much easier to load updates.
Visit www.cch.co.uk/accountsproduction for more information
If your firm receives – or produces – accounts in Word or Excel format then CCH iXBRL Review & Tag
is the ideal tagging tool for the new accounting standards. It eliminates re-typing which improves
efficiency and reduces risk.
Visit www.cch.co.uk/ixbrl for more information
Help from CCH Research & Publications
Whenitcomestoresearchingandlearning,everyonehastheirownstylesoourcomprehensive
coverageandexpertcommentaryareavailableonthreedifferentplatforms.
A range of expert guides and in-depth commentary is available in printed books or on our ebook
platform, Smarteca. Smarteca works across a wide range of devices including desktops, laptops
and tablets. Annotations, highlights and bookmarks are synchronised across all devices and notes
can be shared between colleagues.
Visit www.smarteca.co.uk for more information and free resources
Our online information service, CCH Online, offer the ultimate resource for researching specialist
accounting, audit and tax topics, including FRS 102. Content is delivered via fast, natural language
searching and kept constantly up to date so your professional staff always have access to the latest,
most accurate information.
Visit www.cch.co.uk/cchonline for more information
Your staff will find everything they need on our dedicated online research hub, CCH Navigate GAAP,
including legislation, commentary, FAQs and model accounts, auto-fill letters, templates and forms.
They can even access elearning modules and an integrated CPD tracker.
Visit www.navigate.cch.co.uk to find out more or request a demo
Contact us today for more information about how we can help
• ForCCHSoftware:call 0844 561 8181
• ForCCHResearch&publications:call 0844 561 8166
• [email protected]
Two Critical Ways to Reduce Your Exposure to
Cyber Attacks
The Threat Landscape is
Increasingly Complex
Today’s cyber-attackers are well funded
and sophisticated. They increasingly use a
number of stealthy and continuous phases
to break into a network, avoid detection,
and harvest valuable information over a
long period of time.
This makes attacks increasingly difficult
to detect. Statistics for 2014 show that it
took on average an organisation over 200
days to detect a cyber breach.
By deploying zero-day attacks and other
advanced techniques, hackers can bypass
conventional defences such as firewalls,
intrusion detection, and anti-virus. Their
objective is to infiltrate a firm for financial
gain or to access confidential information
such as customer data.
Preventing, detecting or disrupting the
attack at the earliest opportunity limits
the business impact and the potential for
reputational damage. Putting in place the
right security controls and processes to
ensure your business is a hard target will
give you increased resilience to cope with
more complex attacks.
Redscan helps businesses to effectively
manage the risk of cyber threats. Here are
two critical steps that all firms, large and
small, should employ to reduce or limit the
damage a cyber breach can inflict.
Step One: Close the backdoors
that hackers can exploit
Vulnerabilities and weaknesses within your
systems and applications present a risk
to your information security. Occurring
4
through flaws, features or user error, they
are an easy path for attackers to use so
that they can gain access to and exploit
your environment.
Addressing these weaknesses is
essential. Not only do you remove the
easy points of entry an attacker can target;
it also ensures that when a breach does
occur, the attack surface the hacker/
malware can exploit is significantly
reduced. This is critical in preventing or
limiting the damage a breach can inflict.
Redscan strongly recommends
that firms adopt regular vulnerability
assessments and penetration tests as part
of their information security strategy. These
provide the essential intelligence needed
to prioritise remediation based on the risk
posed to their business. They also enable
firms to more strategically allocate budget
and resources to the areas that require
immediate improvement.
For firms that outsource their IT or
use managed service providers, the
responsibility for a data breach ultimately
lies with the firm. It is therefore critical to
ensure that your service provider is taking
the necessary steps to protect your critical
data. Regular vulnerability assessments
and penetration tests are a good way to
enforce this and measure the performance
of your service provider.
Step Two: Know what’s
happening on your network
Situational awareness is essential for firms
to manage their information security risk.
The ability to rapidly identify a breach
can prevent or limit the damage an
attacker can inflict. A recent report by
Verizon stated that 84% of all breaches
left footprints of the attack in the logs that
networks generate.
With the proposed EU data protection
regulation coming into force in early 2017,
firms need a more strategic approach to
identify, respond, and remediate threats
and breaches. And while many firms have
deployed firewalls, anti-virus and intrusion
prevention systems – these systems
provide no visibility of attackers who have
bypassed their defences.
To successfully carry out proactive
monitoring of your network requires a
combination of skilled security expertise,
security analytics tools and technologies,
and global threat intelligence. As the
amount of data networks generate
increases, the task of identifying genuine
security incidents from the noise of false
alerts also becomes more challenging.
The cost and complexity of this type of
monitoring has proved a barrier for many
firms to implement. However, many firms
can now access fully managed security
services that both lower costs and provide
a much higher quality security service with
bespoke reporting capabilities.
Summary
traditional defences of firewall and
anti-virus are required as the first level of
defence but are no longer sufficient on
their own. The best security practice now
is one of assuming a continuous state of
compromise and implementing ways of
detecting breaches and vulnerabilities so
that the time and attack surface a hacker
can exploit is reduced.
This prevents or limits the damage
a cyber breach can inflict and enables
firms to more effectively manage their
information security risk.
More information:
www.redscan.com
[email protected]
0800 107 6098
Malware and hackers are today much
more evasive and sophisticated. The
Supply goods or services to
professional services firms?
The AIT provides a variety of opportunities
for suppliers of IT related goods and
services to reach the large accounting firms.
To find out how the AIT can work with you
please contact
[email protected]
01582 872597
#AIT_UK
www.aituk.co.uk
5
How flexible is your
practice management
software?
• The most flexible Reporting solution
• The most flexible Engagement Scheduling and Budgeting solution
• The most flexible Staff Budgeting solution
• The most flexible Due Dates/Workflow solution
• The most flexible Time & Billing solution
All in one practice management system
Sounds too good to be true? To find out more
Call us on: 01923 246414
or visit our website: www.starplc.com
Flexible solutions for accountants
Cryptshare AIT Presentation Review – March 2015
Tim Waggett of Befine Solutions – the Cryptshare Company, presented an encrypted email and secure file
transfer solution to us at the March AIT seminar in London. Tim opened with an apology saying that rather
than giving a sales pitch and a demo he would like to discuss the problems of email use in a wider context
before proposing his solution.
Cryptshare’s mission statement is “Making
E-mail Better” and they provide firms of
all sizes a low cost, easy to use way to
secure those sensitive and confidential
messages and large files. Tim asked us,
“Do you all use email?” which of course
we replied “yes”. He then asked, “Do you
impose restrictions on file sizes?” Again
most of us replied “yes”. Finally Tim asked,
“Would you like better security for your
email?” to which we all replied “yes”. So
although email is a vital business tool
having enhanced security and the option
to send large files securely, with an audit
trail, knowing they will not get caught by
firewalls and MS Exchange restrictions, is
seen by us all as very important.
Tim summarised the problems of email,
saying that despite being a universally
accepted medium for messaging it has
three fundamental flaws.
meta-data, client free operation on the
recipient side, initiation of adhoc large file
transfers or provision of the detailed audit
trail we require. (The full details of this are
in Tim’s presentation which is posted here
http://aituk.co.uk/downloads/CryptsharePresentation.pdf). Tim’s presentation
closed with a factual comparison of
Cryptshare to these alternative solutions.
Tim gave a short demonstration of use
of Cryptshare and although we didn’t have
time to see the back-end administration
console we were assured that tight
policies can be set around passwords,
document sizes and data retention. It was
clear that one of the benefits to us as IT
people is the saving in time required to
administer the recipients. As Cryptshare
does not use a private and public key
infrastructure we are not required to
register people which makes it easy for
Email has no audit trail for compliance:
Your messages run an unpredictable route from A to B via a chain of
e-mail servers that can be distributed around the world. This path and
any interventions along the way are not recorded. A plain text (unencrypted) message or attachment could be read by anybody and you
would never know.
Email is not suitable for big files:
Email was not designed to handle large files that is why you and your
clients set size limits in your own e-mail system. You know your limit but
do you know your clients? There is a double hurdle to delivery of large files.
Email is not secure:
The email protocol provides no encryption of data in transit. Thus, there
is no protection against spying and manipulation as messages are in
plain text. In addition the authenticity of e-mail senders and recipients
cannot be verified.
Tim took us through the pros and cons
of the most common solutions to these
problems such as S-Mime, PGP, FTP, S-FTP
and Cloud services and while admitting
they all have their strengths suggested
that in each case there are weaknesses
such as in their ability to encrypt the
staff to send files on an adhoc basis and
for recipients to collect them securely.
During questions It was noted that
this solution can be hosted on-premise
or in an ISO27001 data centre of your
choice. When so many vendors are
pushing towards cloud solutions this was
7
a welcome change and one that I think
you would agree fits in more closely with
our need for keeping client information
within our control without the risks of data
graveyard.
“Would you like better
security for your
email?” to which we
all replied “yes”.
A feature that created some interest
was that the Cryptshare license allows the
recipient (your clients) to send information
back to the sender through your firms
own branded Cryptshare website without
having to install any client software or
register a user name and password.
Your questions showed clear interest
as we are all trying to find easy, secure
and inexpensive ways to communicate
bi-directionally with our clients when
sharing confidential financial information.
One further question that did come up
on the day was how Cryptshare could be
integrated into existing archiving solution
such as MimeCast. We were pleased to
be told that can be achieved through the
use of their API and the Cryptshare Robot
scripting tool which would allow archiving
and DLP scanners to interact with the
Cryptshare server.
Finally, Tim gave us an indication of
price suggesting that where as a cloud
or competitive product might cost £10
per user per month, Cryptshare for a 250
mailbox license would cost just £0.80 per
month or £24 per user over 36 months.
For more information or a free trial
please contact :
Tim Waggett on 07977009547 or
[email protected]
Thomson Reuters Launches Digita
Practice Advanced
Breakthrough in practice management software to deliver real-time integration and greater efficiency
Thomson Reuters, the world’s leading
source of intelligent information for
businesses and professionals, has launched
Digita Practice Advanced: a fullyintegrated practice management solution
that provides accountants with the ability
to manage their entire tax and accounting
practice from one central place.
In a recent survey of Digita customers,
two thirds of accountants identified
pressure on profitability and the need to
differentiate their practice as key business
issues. Over 60% also identified moving
to new cloud technology as a priority
and half need a more flexible working
environment to meet increasing demand.
Digita Practice Advanced is a new
solution designed to meet these
challenges, providing access to real-time
information to aid better decision-making,
client communication, billing, costs and
resource planning. Designed specifically
to deliver major cost and efficiency
savings to medium and large accountancy
firms focused on practice growth, Digita
Practice Advanced also includes a cloudbased portal solution to enable improved
collaboration with clients.
The accompanying free mobile app
also helps firms to further cut down on
wasteful administration tasks and drive
additional time and cost savings by
enabling accountants to access key client,
staff and practice data when out the office
– ensuring that they are always up-to-date
and able to track time and update activity
whilst on the move.
Andrew Flanagan, managing director,
Digita, comments. “Many practices are still
using third party practice management
systems that are not integrated so
information is not automatically shared
across systems. By moving to a fullyintegrated system such as Digita Practice
Advanced, accountancy practices can save
time and money and benefit from more
efficient working practices by eliminating
duplication and time wasted re-keying
in client and staff information numerous
times. For a large firm, this could save in
excess of thousands of hours over the
course of a year.”
One such firm that is already benefiting
from Digita Practice Advanced is Westlake
Clark – a growing accountancy practice
with offices across Hampshire. Zoe
Redmill, partner at Westlake Clark, said:
“In switching over to Digita Practice
Advanced, we now have real-time visibility
of billing and client work, right across the
practice. Each of our 25 team members
can now keep track of who owes what and
what work is in progress and outstanding
for each and every client. This level of
integration and visibility is already bringing
benefits to our practice and we’ve only
just begun to scratch the surface of the
software’s capability.”
8
About Thomson Reuters
Thomson Reuters is the world’s
leading source of intelligent
information for businesses and
professionals. We combine industry
expertise with innovative technology
to deliver critical information to
leading decision makers in the
financial and risk, legal, tax and
accounting, intellectual property and
science and media markets, powered
by the world’s most trusted news
organisation. Thomson Reuters shares
are listed on the Toronto and New
York Stock Exchanges.
For more information, go to
www.thomsonreuters.com
To find out more about Digita
Practice Advanced and to book a
demo, visit:
http://www.digita.com/pro/
software/practice-management/
dp_advanced.aspx
COLLABORATION TOOLS AND ENTERPRISE SOCIAL
NETWORK – Knowings Collaborative Accountants
Nowadays social media is a part of nearly
everyone’s personal life. Since the early
2010’s, following the strong popularity of
social media platforms, medium to larger
sized organisations have started to roll
out company specific social networks,
which are later integrated within their
collaborative platforms. Despite the great
success of enterprise social networks, few
accountancy firms have yet to take the
plunge into this new generation
advanced software.
Collective Efficiency, Mergers,
Multiple Locations, Young
Professionals etc. – The
Opportunities Are Endless
In a world where firms are concentrating,
accountancy practices are looking for
differentiating factors and new services to
offer. Therefore, to demonstrate an ability
to stand out and to suggest innovative
services that are suited to their customers
are vectors of growth that can be achieved
through an enterprise social network.
For an organisation operating from
multiple office locations, communication
can become a little more complicated.
Luckily, enterprise social network tools
and collaborative platforms are able to
provide a solution for the communication,
collaboration and coordination issues
that such companies encounter on a day
to day basis. Moreover, staff and clients
expect smooth communication flows from
which they are presented with targeted
and relevant information which only an
industry specific collaborative extranet,
with added social networking features
will be able to offer. With such a solution,
data and knowledge relevant to the firms’
activity is dispatched tidily from a central
document repository.
The younger generations expect from
their employer the same kind of tools they
utilise in their personal lives. Therefore
such tools should encapsulate their
characteristics of design, ergonomics,
easy communication, universal access,
10
reactions, suggestions etc. An enterprise
social network is able to satisfy these
expectations, both within the organisation,
but also externally. Additionally, the
provision of a modern platform would
act as a genuine talent catalyst towards
revealing the expertise; and maximise
potential of all individual employees within
the organisation.
By monitoring interactions on the
platform, clients’ needs can be anticipated;
a client who chooses to make a query
on a particular subject would receive a
creditable response, but could also be
potentially in receipt of informative advice
on this particular subject; so the benefits
are twofold. With such a platform, the
company is going to be able to detect
new requirements and offer new
services. Also through knowledge
capitalisation, it will be able to present
other clients the opportunity to benefit
from such interactions.
Development of Innovative
Tools for Employees, Clients and
Prospects: Concept to Reality
Whether as an internal document
repository, a collaboration software
platform or a communication tool with
clients, partners or prospects, firms using
an enterprise social network solution
have developed applications that are
specific to their requirements. Such
requirements can include the need for a
human resource intranet system or for an
external marketing tool. And while this
demonstrates the diversity of Knowings
Collaborative Accountant, each site
has one characteristic in common: the
ease with which the platform can be
implemented, whether as an in-house
installation or in a SaaS (Software as a
Service) environment.
2015 should therefore see the
acceleration in the deployment of such
solutions within accountancy firms.
Who is Knowings?
Knowings is a leading software editor that
specialises in document management
and collaborative solutions. Already
established within the Accountancy
profession with its innovative EDM
solution integrating collaboration features,
Knowings now proposes a collaborative
enterprise network platform dedicated to
accountancy firms to specifically address
their collaborative requirements.
What is Knowings Collaborative
Accountants?
Knowings Collaborative Accountants
(KCA) is an integrated ECM, knowledge
management and collaborative software
that is targeted specifically towards the
accountancy profession. KCA is a predefined, ready to use, platform that is built
on the foundations and expertise that
has been gained over the years through
working alongside accountants. This new
generation intranet and extranet addresses
the growing demand for collaborative
tools; hence generating increased
collective efficiency whilst concurrently
taking advantage of opportunities to
improve productivity.
Knowings Collaborative Accountants
will advantageously replace traditional
intranet and extranet solutions.
For more information :
www.euro-accounting.com/knowings
0845 680 5168
Meeting Dates for 2015
TECHNICAL MEETINGS
Thursday 25th June
BCS offices, Southampton Street, London
ANNUAL CONFERENCE
Thursday 24th-Friday 25th September 2015
Beaumont Estate Hotel, Windsor
Presentation/Sponsorship packs are available for both Technical Meetings and
the Annual Conference. Please contact Emma Jones [email protected]
if you would like further information.
AIT are on LinkedIn
To request a signup invitation please email
[email protected]
#AIT_UK
www.aituk.co.uk
11
SymphonyDox Document Automation for Professional Service Firms Client Conscious -­‐ Opportunity Driven In today's world of risk and compliance, slow payment by clients, ever-­‐
changing scope of work, and increasingly high costs of unbillable work, professional service firms need to ensure that their business relationship with new clients is clear. The SymphonyDox document automation solution does exactly that, producing accurate and compliant professional documents and letters. Less time on non-­‐billable work Fee earners need technology to help them work smarter and more productively. The less time they spend on non–billable work the better. This is where SymphonyDox document automation comes in: Client Acceptance. Easily deal with risk assessment and money laundering requirements specific to the type of client and engagement. Robust terms of engagement. Tried and tested document templates accompanying each new engagement gives a firm the best start for a successful client relationship. Legal and Brand Compliance Apart from legal compliance many firms still struggle with standardisation. Engagement. Select which categories of advice to specifically exclude for each engagement. Assign the correct team or entity for each engagement or document ensures and the correct contact details and references are included automatically. Fee arrangements. Structure fixed fee arrangements in different ways including estimates, initial caps and fixed fee arrangements. Selectively request costs on account amounts as required. No more cutting and pasting. You will save time, and because you no longer have to cut and paste from previous letters, potential embarrassment is also avoided. End to end Solution SymphonyDox document automation will integrate with your back end systems using the SymConnect integration Server maximising fee earners’ accessibility and mobility and minimising errors. Run from anywhere. With the SymphonyDox cloud–based solution templates can be accessed from anywhere. For a fee earner on the road, at home, or in the office, this solution is a real time saver. The SymphonyDox solution can be deployed on premise or in the cloud. Using the SymConnect integration server, document templates can access data from ODBC compliant databases. SymphonyDox is also integrated to SymphonyCRM to automate client acceptance and continuance processes. Symphony – APS
3rd Floor, NWS House 1 High Street, Purley Surrey CR8 2AF
T: +44 207 246 9990
www.symphony-at.com & www.aps-at.com
Copyright © 2014 Symphony Professional Solutions Limited.
SymphonyDox document templates are powered by XpressDox
Thomson Reuters Digita conferences guide
accountants towards success through technology
SYNERGY 2015 – New technologies unveiled at Thomson Reuters Digita user conference events
LONDON, 18 May 2015 – Thomson
Reuters, the world’s leading provider of
intelligent information for businesses and
professionals, played host to around 300
accountants and shared with them the
positive advantages of investing in new
technologies, during the company’s Digita
conference series, SYNERGY 2015.
The series of events was held to help
accountants gain the maximum benefits
from Digita tax and accounting software,
understand the latest issues facing the
accountancy industry and discover
strategies for practice growth.
The three conferences, held in Thomson
Reuters flagship Canada Square building
in Canary Wharf, as well as venues in
Chepstow and Harrogate, introduced
keynote speakers, including Darren Root,
CEO of RootWorks, Neil Massa, director
of Space 2 and top business coach, Rudi
Jansen of Accoa.
SYNERGY 2015 coincided with the
launch of Digita’s new Tax Guidance
Pack – an online research and guidance
tool which provides instant answers to
compliance questions. The tool includes
core tax annuals and current awareness
topics and is integrated with key help
topics linked to Digita tax software so
relevant results can be found easily and
quickly. Digita’s new Client Portal was also
revealed which allows practices and clients
to share files in real time and enables the
electronic signing of tax returns.
Andrew Flanagan, managing director
at Digita, part of the Tax & Accounting
business of Thomson Reuters, said: “These
conferences are a great way for us to talk
to our customers about the challenges
they are facing and guide them in the
best ways to harness technology to gain a
competitive edge.
“According to the Office of National
Statistics, 1800 accountants went out
of business in 2014 for reasons such as
compliance work yielding less margin, a
decline in audit work, and attitudes and
regulations in regard to tax planning.
Investing in a technology strategy to tackle
these challenges, improve efficiency, save
money and allow employees to work
flexibly will help accountants differentiate
themselves from their competitors and
attract more suitable clients.”
During his presentation ‘Developing an
Entrepreneurial Thinking Model’ Darren
Root, talked about how practitioners can
develop their mindset to build a business
that will support the lives they want to
live. His speech led delegates through
a refined model for focused, intentional
development, including creating a vision
and business model, enhancing leadership,
and building a strong brand to attract
ideal clients.
13
Portsmouth Chartered Accountant,
Bharat Hathi, said: “I really enjoyed the
event. I’ve been going for a few years
now. The speakers are always great and
the afternoon one-to-one surgeries gave
excellent insight and advice. I attended
three this time and found the Personal Tax
Software session particularly useful. I was
shown how to easily pull off a list of clients
that hadn’t filed their tax returns. This
will really save me time and will make my
workflow much easier in future.”
Andrew added: “An increasing
number of our customers are now using
cloud-based technologies and this is
set to increase. I believe the recent
announcement by the Chancellor to
replace annual tax returns with realtime online accounts will also accelerate
demand for the cloud, and it was great to
get immediate feedback from our clients
on what they want from the cloud and
other technology to help them build
stronger and more profitable practices.”
To find out more about Digita
solutions for accounting, visit:
https://www.digita.com/pro/