Originally by: Chris Gaetano

2025-05-16T15:16:37.000Z

Makosi rolls out AI agent built specifically for EBP audits; OneStream announces new AI agents, other solutions; Suralink rolls out request-to-test solution; and other accounting tech news and updates.

—————————————————————————————-
WISP Weekly Analysis. How is this story relevant to Cybersecurity and your Practice?

**Summary**:
Makosi has launched EBP Eddy, an AI agent tailored to streamline employee benefit plan audits, while OneStream unveiled new AI assistants for financial close and reporting. Suralink introduced a request-to-test portal to manage document exchange securely, and other vendors (FloQast, InfoTech, Arcurve) rolled out enhancements to automate reconciliations and advisory workflows. These cloud-hosted tools boost efficiency but also widen data sharing and integration points for sensitive client records.

**Actionable Advice** for accounting and tax professionals:
• Conduct rigorous vendor due-diligence and ensure SOC 2 or equivalent attestation before onboarding AI tools.
• Update your WISP to cover AI-driven data processes, enforcing least-privilege access, encryption at rest/in transit, and secure API configurations.
• Incorporate these solutions into your incident-response plan—verify logging, alerting, and data-loss prevention controls.
• Review vendor contracts for breach-notification timelines and cyber-insurance coverage for third-party incidents.

**Relevance Score**: 3
While not focused on phishing or ransomware, this article flags significant third-party and data-governance risks tied to new cloud-AI services—core WISP and FTC Safeguard Rule concerns.

**Category Tags**:
#WISPCompliance #ClientDataProtection #VendorRisk #SOC2 #ZeroTrust

Full Story