Who We Insure

Insurance for Accounting Firms

An accounting firm's product is a number a client relies on — a return filed, an election made, a reconciliation trusted. When one of those numbers is wrong, the harm is rarely academic: a missed S-corp election, a misclassified deduction, or an overlooked filing deadline can generate penalties, interest, and a client who wants the firm to make them whole. The claim is usually not fraud; it is the ordinary human error that busy season manufactures at scale.

Why accounting firms carry specialized insurance

The firm also becomes a vault for its clients' most exploitable data: Social Security numbers, bank details, payroll records, and the tax identities that let attackers file fraudulent refunds. That concentration is why criminals treat accounting practices as high-yield targets, and why the busiest weeks of the year — when wires move fast and staff are stretched — are exactly when funds-transfer fraud and phishing land. Underwriters now weigh a firm's email controls and money-movement procedures alongside its claims record. A OnePark Risk advisor builds the program around the mix of work a firm actually does — pure tax prep versus attest engagements versus fractional advisory — because each carries a different severity profile and each is underwritten differently. The aim is a stack where the professional liability, cyber, and crime pieces overlap where money and data actually move, rather than leaving a gap between them.

The risk profile of an accounting firm

Most accounting claims come from routine engagements gone sideways rather than exotic misjudgments, and the firm's technology and cash-handling now sit right beside them as primary exposures. Key exposures: Tax-return errors, missed elections, and blown filing deadlines that trigger client penalties and interest; Advisory scope creep — informal guidance a client later treats as a formal engagement; Spillover from audit, review, or compilation work when a client's financials are later challenged; Funds-transfer and social-engineering fraud spiking during busy-season wire activity; Ransomware and breach exposure on tax-identity and financial data; Insider misuse where staff hold credentials to client bank and accounting systems; Employment claims as the firm scales seasonal and permanent staff.

Accountants Professional Liability (E&O) for accounting firms

This is the policy that answers when a client says your work cost them money — a misprepared return, a missed election, advice that led to a penalty. It funds defense counsel from the first demand, not just a judgment, which matters because a tax authority's assessment and a client's blame often arrive together. Written claims-made, so continuous coverage and tail planning become critical when partners retire or a practice is sold. Typically responds to: defense costs for alleged errors on returns, filings, and advisory work; client penalties and interest the firm is found responsible for; settlements and judgments up to the policy limit.

Cyber Liability for accounting firms

Tax-identity data is monetizable the moment it leaves the firm, and refund fraud makes accounting practices a repeat target. Cyber coverage funds forensics, client notification, credit monitoring, and extortion response, and it answers third-party liability if client data is exposed. Expect underwriters to ask about multi-factor authentication, backups, and email security before they quote. Typically responds to: breach response: forensics, notification, and credit monitoring; ransomware and cyber-extortion negotiation and recovery; funds-transfer fraud and social-engineering coverage (often sublimited).

Crime / Employee Dishonesty for accounting firms

Staff routinely hold login credentials to client bank feeds and accounting platforms, which concentrates temptation and outside-attacker leverage in one place. A crime policy responds to employee theft and, with the right endorsements, to funds-transfer fraud — covering the ground where cyber sublimits stop. For firms with client-fund access, it is not an optional line.

Business Owners Policy (GL + Property) for accounting firms

A visiting client who slips in the lobby, water damage to leased office space, or theft of the firm's workstations all live here, and it usually bundles general liability with property at a favorable rate for a professional office. Landlords almost always require a certificate of general liability before a lease is signed.

Workers' Compensation for accounting firms

Required in the states where the firm employs anyone, including seasonal staff and remote preparers. Beyond the legal mandate, it is the coverage that funds an injured employee's medical care and lost wages so those costs do not land on the firm directly.

Employment Practices Liability (EPLI) for accounting firms

The seasonal hiring cycle magnifies exposure to discrimination, harassment, wrongful-termination, and wage-and-hour claims, and those allegations cost money to defend even when unfounded. EPLI funds that defense and any settlement, and many forms include HR-risk resources for smaller firms without a dedicated HR function.

Contract and certificate requirements

Institutional clients, banks reviewing borrower financials, and larger companies engaging the firm for advisory work increasingly require proof of professional liability before work begins — a $1 million per-claim floor is common, with higher limits requested for engagements tied to financing or M&A. Where the firm handles client funds or has access to client bank accounts, lenders and the clients themselves may also ask for crime or fidelity coverage. Office leases require general liability certificates as a matter of course, and engagements touching regulated data — healthcare or financial-services clients — can contractually require cyber coverage at stated limits. Your advisor should read these obligations before renewal so the program actually matches what the firm's engagement letters promise.

What coverage costs

As of 2026, professional liability pricing for accounting firms is driven by services mix, revenue, staff and partner headcount, claims history, and the limits selected. Firms concentrated in high-severity work — attest engagements, complex advisory, or clients in litigious industries — price above straightforward tax-prep practices. Small firms commonly structure primary limits at $1 million per claim / $2 million aggregate and add excess as client requirements grow. Cyber pricing follows the controls conversation directly: firms with multi-factor authentication everywhere, tested backups, and email-security tooling see materially better terms. For context on why underwriters press, IBM's Cost of a Data Breach Report 2026 put the global average cost of a breach at $4.99 million — and a firm holding thousands of tax identities carries notification and refund-fraud consequences that reinforce the point. Rather than quoting a single figure, a OnePark Risk advisor benchmarks the firm across multiple carriers and shows how limits, deductibles, and services classifications move the premium so the tradeoffs are visible before renewal.

Illustrative example: The missed election

A firm onboards a new corporate client mid-year and, in the handoff between preparers, the S-corporation election paperwork is never filed. The oversight surfaces the following spring when the client faces a far larger tax bill than projected and demands the firm cover the difference. Accountants professional liability assigns defense counsel and funds the response; because the error is hard to contest, the carrier negotiates a settlement reflecting the client's quantifiable additional tax and penalties, paid within the limit less the deductible.

Illustrative example: The busy-season wire

During the final week before a filing deadline, an attacker who has monitored a partner's mailbox for weeks sends spoofed instructions to redirect a client's estimated-payment wire. A six-figure transfer reaches the fraudster before anyone notices the lookalike domain. The cyber policy's social-engineering and funds-transfer-fraud coverage responds for the recoverable portion and funds the forensic review of the compromised mailbox; the crime policy's endorsements answer where the cyber sublimit is exhausted, and professional liability stands behind any client claim that the firm's procedures fell short.

Illustrative example: Ransomware before the deadline

A regional practice is encrypted overnight in April; the attackers exfiltrate a sample of client returns and threaten to publish them. Preparers cannot access working files as deadlines approach. Cyber coverage funds the incident-response firm, ransom negotiation, restoration from backups, notification to affected clients, and business-interruption loss for the downtime — plus defense if any client alleges inadequate safeguards.

How much does insurance cost for an accounting firm?

There is no flat rate. As of 2026, pricing is driven by the firm's services mix, revenue, headcount, claims history, and chosen limits, with attest and complex-advisory work pricing above routine tax prep. Many small firms structure professional liability at $1 million per claim / $2 million aggregate and layer cyber and crime alongside it; the right way to size premium is to benchmark the specific firm across several carriers rather than rely on a single quoted number.

Is professional liability insurance required for accounting firms?

State boards of accountancy govern licensure and, in many states, peer-review or quality-control expectations for firms performing attest work, but a blanket mandate to carry E&O is not universal. In practice firms carry it regardless because clients, lenders, and engagement letters expect it, and defending even a meritless claim without coverage is costly. Your advisor can align limits with the specific licensing and client requirements the firm faces.

Does cyber insurance cover a redirected client wire?

Often partially — through social-engineering or funds-transfer-fraud coverage — but those are frequently sublimited well below the full cyber limit. A crime policy with the right endorsements fills the remainder. Because accounting firms move client money on tight busy-season timelines, closing that gap before an incident is exactly what a coverage review is for.

What's the difference between coverage for tax work and audit work?

Attest engagements — audits, reviews, compilations — expose the firm to third-party reliance and higher-severity claims, and carriers underwrite them more conservatively than pure tax preparation and bookkeeping. Firms that add or expand attest work should tell their advisor, because it changes both the classification and the appropriate limits.

We're a solo practice — are we really a target for attackers?

Yes. Attackers follow the data and the money, and a solo practice still holds hundreds of tax identities and moves client funds with fewer verification layers than a bank. The Sophos State of Ransomware 2025 report put the median ransom payment near $1 million and average recovery costs at $1.53 million excluding ransom — figures that do not shrink simply because the practice is small.

What will underwriters ask before quoting our firm?

Expect questions about services mix and revenue, claims and disciplinary history, whether the firm performs attest work, and — for cyber — multi-factor authentication, backups, email security, and wire-verification procedures. Firms that can document those controls consistently see better pricing and fewer exclusions.

Can OnePark Risk review our program without moving carriers?

Yes. A coverage review does not require changing anything. We benchmark the firm's current terms against the market, flag gaps — tail exposure, cyber sublimits, missing crime coverage where staff hold client credentials — and you decide whether a move is worthwhile.

Frequently asked questions