I am aware that a security plan is required.  I am beginning to think what we have isn't enough.  We were notified of possible EFIN fraud.  I am reading all the IRS publications on keeping everything secure.  We are a very small firm.  I am curious how other firms are doing this?  Even though we decided not to, I am about ready to call it a day and switch to the cloud based program simply for cyber security.  

Thanks!