#risk-assessment

Risk Assessment

Assess financial risks and implement mitigation strategies

July 19, 20266 min read

PCAOB Bars Zwick CPA Over Fabricated Genie Energy Workpapers: What Audit Quality Failures Mean for Small Businesses

The PCAOB revoked Zwick CPA's registration and fined the firm $50,000 after finding its 2022 Genie Energy audit relied on the predecessor auditor's recycled workpapers with swapped names and fabricated documentation. With 61% aggregate deficiency rates at triennially inspected firms, here's how small businesses can vet the audits they rely on — and keep their own books diligence-ready.

Mike Thrift

auditcpafraud-prevention

July 16, 20265 min read

Commercial Insurance Is Softening in 2026 — But Small Businesses Aren't Feeling It

In H1 2026, large commercial accounts saw premiums fall an average of 2.7% while small business accounts rose about 1.1%, driven by minimum-premium floors, catastrophe exposure, and hardening casualty rates offsetting property-side relief.

Mike Thrift

insurancebusiness-insurancesmall-business

July 15, 20269 min read

Why Every CPA Firm Needs a Written AI Policy Before the Next Staff Member Uses ChatGPT

73% of accounting firms now use AI tools but only 37% have any formal AI training, and staff pasting client data into consumer chatbots can trigger data breach notification duties under the AICPA's Confidential Client Information Rule — here is what a usable two-page AI policy for a small CPA firm actually covers.

Mike Thrift

cpaaicompliance

July 14, 20269 min read

SOC 2 Type II Audit Cost: A Small SaaS Company's Complete Budgeting Guide

A first-year SOC 2 Type II report for a 10–50 person SaaS company typically costs $25,000–$80,000 total, with the audit fee itself covering only about 40% of that — internal labor and readiness work make up the rest.

Mike Thrift

compliancesecuritystartup

July 12, 20269 min read

CIRCIA's 72-Hour Cyber Incident Reporting Rule: A Small Business Guide

CIRCIA requires covered entities to report substantial cyber incidents to CISA within 72 hours and ransomware payments within 24 hours, with the final rule expected in fall 2026 and coverage reaching an estimated 300,000-plus organizations across 16 critical infrastructure sectors.

Mike Thrift

compliancesecuritysmall-business

July 12, 20268 min read

Financial Scams Targeting Small Businesses: The Warning Signs Before the Wire Goes Out

The FBI's IC3 logged $3.05 billion in business email compromise losses in 2025, and only 25% of small businesses have a whistleblower reporting mechanism versus 85% of large companies — here's how vendor impersonation, payroll diversion, and check fraud unfold, and the controls that stop them before a wire goes out.

Mike Thrift

fraud-detectionfraud-preventionsmall-business

July 10, 20269 min read

Algorithmic Pricing and Antitrust Risk: A 2026 Compliance Guide for Small Businesses

DOJ's 2025 RealPage settlement and new 2026 laws in New York, Maryland, and California mean small businesses using algorithmic pricing tools — from Amazon repricers to short-term rental software — now face real antitrust and disclosure compliance risk, not just large landlords.

Mike Thrift

antitrustcompliancelegal

July 10, 20267 min read

What Botkeeper's Sudden Shutdown Teaches Every Small Business About Trusting an AI Bookkeeping Vendor

Botkeeper, an AI bookkeeping platform that raised nearly $90 million over 11 years, shut down within weeks after losing 30-40% of its revenue when major accounting-firm clients consolidated, leaving hundreds of firms to scramble for replacement bookkeeping infrastructure and export data before access was cut off.

Mike Thrift

aiaccounting-softwaresmall-business

July 10, 20266 min read

Can You Trust ChatGPT With Your Small Business Taxes? What a 2026 Head-to-Head AI Test Found

NerdWallet's 2026 test of ChatGPT, Gemini, and Perplexity found all three chatbots nearly aced IRS exam-style tax questions but made costly errors on personalized advice — misstating the standard deduction by nearly $3,000, claiming an ineligible EV credit, and recommending the wrong filing state — showing AI is reliable for factual lookups but not for case-specific tax decisions.

Mike Thrift

aitaxtax-preparation

July 10, 20266 min read

The CPSC eFiling Mandate: What Small Importers Need to Know Now

Starting July 8, 2026, the CPSC requires importers to eFile certificate-of-compliance data directly into CBP's ACE system for every regulated shipment, with violations risking penalties up to $120,500 per infraction.

Mike Thrift

compliancee-commercesmall-business

July 10, 20269 min read

Why 'FDIC-Insured' Didn't Protect Synapse's Customers: A Business Owner's Guide to Fintech Deposit Risk

Synapse Financial Technologies' April 2024 bankruptcy trapped over $265 million belonging to more than 100,000 fintech customers, despite their funds sitting at FDIC-insured banks, because the middleware ledger tracking who owned what inside pooled "FBO" accounts fell apart — exposing a gap between deposit insurance and banking-as-a-service infrastructure that remains largely unclosed as of mid-2026.

Mike Thrift

fintechbankingsmall-business

July 10, 20268 min read

The White House's 2026 Fintech Executive Order: A Small Business Banking Guide

A May 19, 2026 executive order pushes banks and fintechs closer together, reviving the layered-partnership risks the 2024 Synapse collapse exposed — here's what small business owners should watch and do before the 90- and 180-day regulatory deadlines hit in August and November 2026.

Mike Thrift

fintechbankingsmall-business

Start Free→Documentation