Protecting Information.
Preserving Trust.

How to read this section

The enterprise-grade foundation SRG operates on — not the standard consumer or small-business tier.

Business Premium includes built-in security features unavailable in lower Microsoft 365 tiers: advanced threat protection, device management, identity controls, and information governance. This is the platform layer that makes the controls below possible.

Controls who can sign in and what they can access — across every system, application, and document in the SRG environment.

Multi-factor authentication is enforced for all SRG accounts. Access is granted based on role and business need. When a user's role changes or an engagement ends, access is reviewed and adjusted. For clients, this means the people who can reach your financial information are the people who are supposed to.

Monitors the SRG environment for threats — across email, devices, identities, and applications — and supports detection and response.

Defender is actively deployed across SRG's environment. It provides real-time threat signals, alerts on suspicious activity, and supports investigation when something unusual occurs. It does not eliminate every threat, but it significantly improves visibility into what is happening across the platform.

Client financial information is encrypted in transit and at rest within the Microsoft 365 environment.

Data moving between SRG systems and clients is encrypted using TLS. Data stored within Microsoft 365 — documents, workpapers, reports — is encrypted at rest by the platform. SRG does not transmit sensitive financial information through unencrypted channels as a standard practice.

Governs how information is classified, labeled, retained, and protected based on its sensitivity.

SRG uses Purview to apply information classification — distinguishing Public, Internal, Client Confidential, and Restricted materials — and to enforce retention and handling policies appropriate to each category. This is how governance decisions get translated into actual controls on documents and data.

The controlled environment where client workpapers, reports, and supporting documents are stored and managed.

Rather than financial information living in email inboxes or on individual computers, SharePoint provides a centralized, access-controlled location. Documents are versioned, access is logged, and retention policies apply automatically.

Spend management, corporate card controls, and expense visibility — integrated with SRG's financial operations work.

Ramp is actively used in SRG's own operations and recommended to clients where appropriate. It provides real-time visibility into spending, enforces approval workflows, and reduces the manual effort associated with expense management and reconciliation.

An advanced intelligence layer built into Microsoft 365 that can help connect information across documents, communications, and business systems.

Copilot is available within SRG's Microsoft 365 Business Premium environment. Where it is used, it operates within the same access controls and governance boundaries as the rest of the platform — it can only surface information a user already has permission to access. Human review and professional judgment remain required for all significant financial conclusions, executive reporting, and client deliverables.

Transforms financial and operational data into dashboards and performance indicators for leadership visibility.

Power BI is available within the platform and used on engagements where dashboard reporting is part of the scope. It does not replace financial statements — it supplements them with visual performance indicators that help leadership teams track what matters.

Supports approved workflow automation — notifications, approvals, and repetitive process steps — within governed boundaries.

Where Power Automate is deployed, it operates within defined approval workflows and is subject to the same change management and human oversight standards as other SRG processes.

A modern financial operations and business management platform under evaluation for select client engagements.

SRG's Financial Intelligence platform operates across multiple accounting and ERP environments. Business Central is one foundation we are actively evaluating for engagements that require a scalable, integrated financial operations platform.

Multi-factor authentication is enforced for all SRG accounts. A password alone is not sufficient to access SRG systems, client documents, or financial workpapers.

Access is granted according to legitimate business need and approved responsibilities.

Client financial information is encrypted in transit and at rest. Documents are classified by sensitivity and handled according to documented retention and protection policies.

Security technologies support detection of suspicious activity and potential threats.

Information is managed using documented governance and operational practices.

SRG maintains continuity, recovery, and knowledge-preservation practices.

Technology supports our work. It does not replace professional responsibility.

Advanced intelligence tools may assist in organizing, locating, summarizing, and connecting information across approved business systems and workflows.

Public

Information approved for general distribution.

Internal

Information intended for authorized SRG personnel and approved stakeholders.

Client Confidential

Financial, operational, and business information intended for authorized users.

Restricted

Highly sensitive information requiring enhanced handling and limited access.

Records Management

Data Governance & Records Management

Reliable decisions require reliable information.

SRG maintains documented operating practices designed to support:

Client information remains subject to the ownership, confidentiality, retention, access, return, and disposition provisions established within applicable engagement agreements. SRG's role is to manage, protect, process, analyze, and report on information in support of authorized business purposes.

Human Accountability

Financial Intelligence with Human Accountability

Modern technology can accelerate reporting, improve visibility, automate routine work, and provide deeper operational insight.

However, technology does not replace professional judgment.

Automation supports decision-making. People remain responsible for it.

Significant financial conclusions, executive reporting, and client deliverables remain subject to appropriate human review and approval before release.

Many small and mid-sized businesses assume sophisticated security, governance, and operational controls are available only to large organizations.

We believe growing organizations deserve the same disciplined approach to protecting and managing financial information.

Our investment in modern technology, governance practices, documented processes, and operational controls helps us deliver financial leadership with greater visibility, accountability, reliability, and confidence.

The purpose is not technology for technology's sake. The purpose is helping business owners gain clarity, confidence, control, and actionable Financial Intelligence that supports better business decisions.