Spring cleaning – Practical cybersecurity steps for payroll & BAS systems

Turn on MFA for payroll, BAS lodgement, super clearing, and accounting platforms

Remove old users (ex‑employees, contractors, bookkeepers no longer engaged)

Restrict admin access to only those who genuinely need it

Enable audit logs so you can track changes to pay rates, bank details, and super settings

Verify bank detail changes verbally — never rely on email alone

Use individual logins, not shared passwords

Secure your super clearing house credentials in a password manager

Check STP Phase 2 categories to ensure no unauthorised changes have occurred

If your systems feel a bit “held together with spreadsheets and goodwill”, September is the perfect time for a digital clean‑up.

Happy to help if you want a quick review.

Leave a comment