defend your data
Tax & Accounting07 August, 2020

Defend your data from the rising tide of cybercrime with our new authentication system

Natasha Kobrak, Senior Product Manager at Wolters Kluwer Tax & Accounting UK, introduces Wolters Kluwer Account, our new authentication system. She explains why, in the fight against cybercrime, it’s a powerful weapon to have in your armoury.

 

It’s over two years now since the General Data Protection Regulation (GDPR) was implemented. Its advent brought home to all of us the responsibility we have to protect the personal data we hold on employees and clients alike.

More recently, the recent rise in remote working has heightened the need to be ever watchful in safeguarding data from cybercrime as it travels across the internet.

Personal data shall be “processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures”.

Article 5(1)(f) of the General Data Protection Regulation

 

You can’t rely on passwords alone

Even the strongest, most randomised password is no protection. The UK’s National Cyber Security Centre (NCSC) catalogues some of the devious ways passwords are obtained or circumvented. These include guessing, stealing and spraying passwords, also known as a brute force attack, and socially engineering account details using techniques such as phishing.

As cybercriminals hone their methods, the NCSC advises: “Organisations should choose cloud and internet-connected services that offer a form of multi-factor authentication (MFA). Organisations should consider carefully the use of services which only allow for single-factor authentication.”

With MFA, users must enter two types of identifiers before logging into their account. Generally this will be something they know, such as a password, and something they have, such as a code sent by email or SMS or generated by an authentication app.

You will no doubt have encountered this commonly used security mechanism. HMRC uses MFA for sign-in to its online services and it’s also commonly used by the banks.

Adopting multi-factor authentication helps strengthen compliance with GDPR requirements. Like the NCSC, the European Union Agency for Network and Information Security (ENISA) recommends the use of MFA to ensure only legitimate users can access data online. ENISA provides guidelines to member states and private sector organisations on implementing EU legislation.

“Two-factor authentication should preferably be used for accessing systems that process personal data.”

The European Union Agency for Network and Information Security (ENISA)


Enter Wolters Kluwer Account

At Wolters Kluwer Tax & Accounting UK, we are continually looking for ways to help you protect the wealth of personal data you acquire as clients connect and collaborate with your team through tools such as CCH OneClick cloud software.

Wolters Kluwer Account, our new MFA authentication platform, is set to replace the existing CCH OneClick authentication system. It is the outcome of a pan-European project that we’ve been working on for some time. Wolters Kluwer Account is already in use in Scandinavia and other parts of Europe, and now we’re bringing it to the UK. In fact, we’re actively rolling it out to several practices who had already requested MFA.

The aim is for Wolters Kluwer Account to be used across all our cloud products, with the benefit that users will be able to use the same login to access products such as CCH OneClick and Twinfield.

Please note, there is no additional charge on top of the CCH OneClick cost, but you will need to be using CCH Central version 2018.3 or above to benefit.

Users of Wolters Kluwer Account will be able to decide what form of MFA they wish to use for added security with their CCH OneClick account. During the activation process they can choose what comes next after entering their password: would they like to use a code sent by email/SMS or a mobile authenticator app as their next level of authentication?

Get to know Wolters Kluwer Account

To find out more, please contact your account manager who will discuss the way forward with you.