Turn on MFA for payroll, BAS lodgement, super clearing, and accounting platforms
Remove old users (ex‑employees, contractors, bookkeepers no longer engaged)
Restrict admin access to only those who genuinely need it
Enable audit logs so you can track changes to pay rates, bank details, and super settings
Verify bank detail changes verbally — never rely on email alone
Use individual logins, not shared passwords
Secure your super clearing house credentials in a password manager
Check STP Phase 2 categories to ensure no unauthorised changes have occurred
If your systems feel a bit “held together with spreadsheets and goodwill”, September is the perfect time for a digital clean‑up.
Happy to help if you want a quick review.