Union Strong, Cyber Smart: The Importance of Cybersecurity Plans for Unions

Union Strong, Cyber Smart: The Importance of Cybersecurity Plans for Unions

In an increasingly technology-centric world, data security is unsurprisingly among the top concerns for many organizations in 2025—and unions are no exception. Unions are responsible for storing and protecting sensitive digital data, including members’ personal details, union financial information, and collective bargaining strategies. Unfortunately, this data can attract cyber criminals seeking to profit from stolen confidential information.

Recent cyberattack incidents involving unions have demonstrated the serious level of damage these attacks can inflict. In July 2024, the Pennsylvania State Education Association (PSEA) experienced a data breach that exposed the personal information of more than 500,000 education professionals. The exposed data included member names, contact information, social security numbers, driver’s license and passport information, banking information (account/routing numbers, PINs, card numbers, etc.), usernames and passwords, health insurance information, and medical records. The PSEA now faces a class action lawsuit by current and former members whose personal data was breached. UNITE HERE, a New York-based union representing workers in the hospitality and food service industries, recently faced a similar class action suit as a result of a 2023 data breach. The union has agreed to pay $6 million to resolve the lawsuit. Unfortunately, these are just two of many examples.

All it takes is one security breach to damage a union both financially and reputationally. Cybersecurity plans are crucial for unions to protect their members, assets, and operational integrity. A strong cybersecurity plan consists of clearly established protocols put in place to minimize the risk of cyber-attacks, as well as a plan for responding to security incidents.

Below are some of the essential components of a comprehensive cybersecurity plan.

  • Training and Awareness

Raising awareness is one of the most important preventative measures you can take to safeguard your union against threats. Regular cybersecurity training helps employees to recognize cyber threats, implement safe cyber practices, and prevent potential attacks.

  • Password Policies

Just like you wouldn’t leave your house unlocked at night, you should never leave your devices and accounts unsecured. In fact, you should double-lock them…and change the locks out frequently. Strong passwords, multi-factor authentication, and regular password changes help to secure devices and accounts containing important data.

  • Encrypted Data

Encrypting sensitive data and communications ensures that your information is unreadable to unauthorized parties.

  • Firewalls, Anti-Malware, and Antivirus Software

Protections such as network firewalls, anti-malware, and antivirus software help to secure your online systems by detecting and blocking malicious activity, including viruses, malware, spyware, and ransomware. These defenses act like gatekeepers for your network, monitoring and controlling what goes in and out.

  • Updated Software

Outdated software systems are more vulnerable to attack. Regularly updating your union’s software is essential for maintaining your network’s resilience to threats.

  • Regular Risk Assessments

Regular risk assessments—conducted either internally or by a third-party cybersecurity service provider—are necessary for identifying system weaknesses and areas for improvement.

  • Response Plan

All unions should create a response plan outlining the steps to be followed in the case of a cybersecurity threat or incident. CISA (Cybersecurity and Infrastructure Security Agency) provides this guide for creating an Incident Response Plan (IRP), identifying actions that should be taken by an organization before, during, and after a cyber incident.

Protect Your Union’s Financial Health

Creating and implementing a comprehensive cybersecurity plan is a critical step you can take to safeguard your union’s sensitive information. When it comes to protecting your union’s financial health and integrity, partnering with RBT CPAs is another measure you can take. RBT CPAs has been serving organizations in the Hudson Valley and beyond for over 55 years. Our experts are here to support all of your union’s accounting, advisory, audit, and tax needs. Contact RBT CPAs today to find out how we can be Remarkably Better Together.

Innovation in the Hospitality Industry: How New Tech Can Help Boost Profits and Efficiency

Innovation in the Hospitality Industry: How New Tech Can Help Boost Profits and Efficiency

It’s no secret that technology is transforming the hospitality industry. From online ordering to virtual reality hotel tours, nearly every aspect of hospitality has been reshaped by recent advances in technology.

Let’s take a look at some of the latest developments in the digital revolution—and how restaurants and hotels can leverage these technologies to improve their operations and increase profitability.

Point-of-sale (POS) Systems:

POS systems act as command centers for all transactions and data within a business, enabling hospitality businesses to manage food orders, payments, invoicing, inventory, sales tracking, staff scheduling, and more—all from one central location. POS systems automate many of these processes, leading to increased accuracy, consistency, and efficiency across the board.

Online Ordering and Reservations:

Online ordering systems let customers place orders directly from a restaurant website or via third-party mobile apps. Similarly, online reservation systems allow customers to make reservations from their phones or computers, while at the same time enabling restaurants to better manage seating plans and wait times.

Digital and QR Code Menus:

Digital menus, electronic menu displays, and mobile QR code menus allow restaurants to update menus in real-time and display eye-catching visuals.

Contactless and Mobile Payments:

Contactless payment enables customers to tap their credit cards or smartphones on a payment terminal to pay without cash or a PIN, while mobile payments allow customers to pay directly from their phones.

Self-Order Kiosks:

Self-service kiosks and tableside ordering tablets enable customers to view menus and place orders using a touchscreen.

Self-Check-in/Check-out Kiosks:

Similar to self-order kiosks, self-check-in kiosks allow hotel guests to check in and out of their rooms without the need for a physical staff member. These self-service kiosks create a faster and more convenient check-in experience for guests while also reducing staffing costs.

Automated Email Marketing:

Specialized software enables hospitality businesses to automate emails to customers based on pre-established triggers, cutting down on administrative time and costs.

Personalized Marketing through AI:

Artificial intelligence has the ability to learn user preferences and tailor marketing strategies and experiences to meet those unique preferences.

AI Chatbots:

Customer service chatbots answer questions for guests in place of a human employee, ensuring consistent service and responsiveness, and saving hospitality employers on labor costs.

Virtual Tours:

Virtual reality tours offer guests an immersive look at buildings, grounds, and amenities prior to booking.

Sustainable Technology:

Sustainable tech, such as smart thermostats and lighting, renewable energy sources, and waste reduction systems, can help restaurants and hotels save on energy and operational costs.

Data Analytics:

Automated data analytics technology helps hospitality managers identify purchasing patterns, customize guest experiences, and optimize pricing.

Demand Forecasting:

AI-driven predictive analytics allow businesses to more accurately forecast future demand, guiding important operational decisions.

Social Media:

Hotels and restaurants are increasingly turning to social media marketing on platforms like TikTok and Instagram to engage with customers, especially among younger audiences.

Are You Taking Advantage of Available Technologies?

Hospitality businesses are seeing real benefits as a result of embracing AI, automation, and other technologies. Based on a 2024 survey conducted by TouchBistro and research firm Maru/Matchbox, nearly all of the 600 restaurant owners and managers participating in the survey reported benefits from automation, “with 42% reporting more productive staff, 41% reporting an increase in sales, and 40% reporting business growth.” EHL Insights lists several benefits for hospitality businesses adopting new technologies, including more personalized guest experiences, increased operational efficiency, cost optimization, and improved competitive advantage. While you consider the benefits new technology could bring to your business, let RBT CPAs take care of your accounting, audit, tax, and advisory needs. Reach out to RBT CPAs today to find out how we can be Remarkably Better Together.

What are the Fiscal Responsibilities of Board Members?

What are the Fiscal Responsibilities of Board Members?

Members of the governing board are responsible for developing and overseeing the municipality’s fiscal policies and operations. This article provides an overview of the fiscal responsibilities of board members, as outlined in the Local Government Management Guide by the Office of the New York State Comptroller.

  1. Developing Fiscal Policies

Board members are responsible for developing, adopting, and reviewing fiscal policies. These policies must be communicated clearly to all relevant members of management and staff. Local governments should review their fiscal policies annually and update them as needed. Below are the fiscal policies required by general municipal law, as well as policies that, while not required by general municipal law, are recommended to prevent fraud and abuse within the municipality. Descriptions of each of these policies can be found in the OSC’s guide.

Policies Required by General Municipal Law:

Code of Ethics, Investment Policy, Procurement Policy.

Recommended Policies:

Wire Transfer and Online Banking Policy, Travel and Conference Policy, Credit Card Policy, Computer Use Policy, Cell Phone Use Policy, Capital Asset Control Policy.

Additional policies may be developed for other aspects of financial operations, including budgeting, cash receipts and disbursements, managing fund reserves, retirement reporting, billing procedures, claims processing, financial reporting and network security.

  1. Monitoring Fiscal Operations

Interim Reports:

Applicable adopted policies should include instructions regarding the timing and content of periodic or “interim” reports. Board members are responsible for reviewing regular financial reports from senior management and department heads. Interim reports contain information related to financial position, results of operations, budget status, policy compliance, service or project costs, performance measures, and legal compliance matters.

Budgetary Status Reports:

The governing board is responsible for adopting and monitoring the budget. The CFO, designated budget officer, and department heads should monitor actual revenues and expenditures, reporting these numbers to the board. These numbers can then be compared to budget estimates to identify any variances or need for corrective action. It is the duty of the board to review budgetary status reports, question any unfavorable variances, and ensure the necessary corrective action is taken.

Correcting Budgetary Problems:

When the budgetary status report indicates unfavorable variances or issues, the governing board is obligated to implement corrective action in a timely manner. Corrective actions may include restricting additional expenditures in that particular area or making a budgetary amendment. A budgetary amendment can be accomplished by:

    • transferring between appropriations within the same fund
    • appropriating available fund balance
    • appropriating aid, grants, gifts, or insurance proceeds
    • issuing budget notes

Special Purpose Reports:

Local officials may prepare special purpose reports for certain categories to be reviewed such as construction projects, procurement, personnel, receivables, and particular revenues or expenditures.

  1. Conducting Audits

Lastly, the governing board is responsible for conducting audits. Audits are used to assess the municipality’s financial operations, identify issues, and ensure the proper management of public funds.

Claims Auditing:

The role of the board in auditing claims serves as an important internal control because it separates the purchase of goods/services and the authorization of payments for those goods/services.

Annual Audits:

The board is required to conduct an annual audit—or to arrange an annual external audit (depending on specific audit requirements)—of the municipality’s financial records, books, and documents.

Board-Directed Annual Audits:

Annual audits conducted by the governing board should ensure that all financial records are complete and up-to-date, that all transactions are recorded properly, that accountability is computed monthly, and that all required reporting is done accurately and timely.

Corrective Action Plans:

Any municipality that receives an audit report or management letter with recommendations should prepare a corrective action plan. A corrective action plan is a written document detailing the corrections planned in response to each recommendation. The governing board is responsible for reviewing and approving the corrective action plan.

Additional Resources and Guidance

The governing board’s oversight is integral to the financial health of a municipality. As such, it is crucial that board members are aware of their responsibilities regarding fiscal operations. Additional resources and reference information for board members, including specific audit and recordkeeping requirements, can be found in the appendices at the end of the OSC’s guide. The OSC’s “Academy for New York State’s Local Officials” also provides training, resources, and webinars on various financial topics designed specifically for local government officials. And as always, RBT CPAs is here to support your municipality’s accounting, tax, audit, and advisory needs. Contact us to learn more.