Cybersecurity Update: The Latest Plans, Threats, and Resources

Cybersecurity Update: The Latest Plans, Threats, and Resources

Well, I don’t think we have to take up time convincing anyone that cybercrime is increasing and municipalities are attractive targets (after healthcare and education, local government is the most frequent target for cybercriminals, according to KnowBe4.com). What is mind-boggling is that the threats have morphed from being attributable to a lone computer genius in a back room somewhere into international gangs with names like Clop, Cuba, Royal, REvil, Evil Corp, and DarkSide. I mean, when all of this started, who would have thought that someone in a U.S. town or school office could be targeted by a Russian gang in cyberspace?! Well, they can.

All of this has spurred a more coordinated and collaborative approach to addressing cybersecurity at the federal, state, and local government levels, alongside private enterprise. At the end of last year, the 2023 omnibus spending agreement included $2.9 billion for the Cybersecurity and Infrastructure Security Agency (CISA), as well as $1.6 billion for the National Institute of Standards and Technology (NIST). What’s more, the federal Joint Ransomware Task Force (JRTF) was formed to combat the growing and ongoing threat of ransomware attacks.

We entered 2023 with $35.2 million in new funding to support New York’s statewide cybersecurity and use of shared services to identify potential security gaps (that’s in addition to the $61.9 million allocated for cybersecurity in the 2023 state budget). The State Division of Homeland Security and Emergency Services began creating a first-of-a-kind specialized industrial control system (ICS) assessment team to boost the security and resilience of critical infrastructure and manufacturing systems against cyberattacks.

With small businesses and municipalities at a disadvantage when it comes to standing up to cyber criminals, in March, the White House introduced the National Cybersecurity Strategy with an emphasis on the importance of industry and government cooperation. It notes:

“Malicious cyber activity has evolved from nuisance defacement to espionage and intellectual property theft, to damaging attacks against critical infrastructure, to ransomware attacks and cyber-enabled influence campaigns designed to undermine public trust in the foundation of our democracy.

Once available only to a small number of well-resourced countries, offensive hacking tools, and services, including foreign commercial spyware, are now widely accessible. These tools and services empower countries that previously lacked the ability to harm U.S. interests in cyberspace and enable a growing threat from organized criminal syndicates…Together, industry and government must drive effective and equitable collaboration to correct market failures, minimize the harms from cyber incidents to society’s most vulnerable, and defend our shared digital ecosystem.”

I’d say perhaps the author was watching a little too much Star Wars or Star Trek when that was written but, unfortunately, the situation really is that dire. Just consider what happened in Dallas, Oregon, and Oakland earlier this year.

IBM Security’s 2023 Cost of a Data Breach Report analyzed 552 data breaches across 17 industries and 16 countries and found phishing remains the top form of cybercrime, occurring 16% of the time. Compromised credentials came in a close second at 15% and cloud misconfiguration led to 11% of breaches. Data stored in public, private, or hybrid cloud environments were connected to 82% of breaches. Each public sector breach costs an average of $2.6 million. (Teale, Chris. “Public Sector Slow to Respond to Cyberattacks, Report Finds.” July 25, 2023. Route-fifty.com.)

According to Route-fifty.com, “IBM found that 19% of public sector agencies make ‘extensive use’ of security driven by artificial intelligence and automation, which can reduce staff workload, increase efficiency and save money. The company found that the approaches could save organizations in the public or private sectors around $1.7 million in data breach costs and 108 days in time identifying and containing a breach.’

“In addition to investing in automated security tools, IBM urged organizations across all sectors to build security into every stage of software development and deployment, modernize their data protection practices across the hybrid cloud, and understand their attack surface so they can be better prepared.”

All of this feels like we’re moving in the right direction. Still, just last week, Smartcitiesdive.com shared a warning from NY state officials that cyber threats to critical infrastructure are growing. So, this story will definitely be continued. In the meantime, an abundance of resources is available to support and guide New York municipalities’ cybersecurity efforts:

While you focus your resources and time on cybersecurity, you can trust RBT CPAs to handle your accounting, audit, tax, and advisory service needs. To learn more, give us a call today.

 

RBT CPAs does not outsource work to any other country. All of our work is prepared in the U.S.A. 

Are You Getting Mixed Messages About New York’s Budget?

Are You Getting Mixed Messages About New York’s Budget?

New York has a 2024 Fiscal Year Budget! It comes to $229 billion, a $7 billion increase over last year. After scouring numerous articles to learn more, the main things I walked away with are that there will be a minimum wage increase; no new personal income taxes; no gas hookups in future construction; judges will have a little more flexibility; a handful of inactive charter schools will be reactivated; more people will be eligible for childcare support; the cigarette tax will go up $1; and there are some changes to the MTA. However, it felt like for $229 billion something was missing, so I decided to take a closer look.

I started with New York’s five-year financial plan.  The Executive Summary reviews the state’s economic strength pre-COVID, briefly mentions the pause that occurred on many levels during COVID, and then notes that “States finances, however, have fared better than expected.”

From FY 2020 to FY 2021 – the acute phase of COVID, tax collections declined .6%. By the following FY (2022), tax collections grew by 27% (“equal to about seven years of typical tax receipts growth compressed into a single year”). This year, tax collections are expected to increase by almost $115 billion or almost 10%. There will be a General Fund surplus of $8.7 billion.

The summary notes, “The surplus is used to strengthen the State’s capacity to weather the economic downturn on the horizon.” Some of that money is going into reserves for the future. Some of it is prepaying Retirement Health Trust Fund benefits. Some is for debt recapitalization. The balance is for “prepaying expenses and managing budget gaps.”

So, we will end the FY with a cushion of about $19.5 billion and will have prepaid over $10 billion in future debt service costs from 2024 to 2027. Tax receipts are still coming in strong, but there’s an expected “mild national recession” in 2023.

Financial challenges are expected in 2024 to 2027. Wage growth is expected to slow, decreasing from 3.3% and 4.3% in the May 2022 forecast to 2.8% in FY 2023 and 2.3% in FY 2024. Bonus income will take a big hit, declining 27% in FY 2024 from FY 2022. General Fund tax receipts before the actions in the recently approved budget are reduced by $2.1 billion in FY 2024; $7.4 billion in FY 2025; $7.8 billion in 2026 and $5.2 billion in 2027. Still, it sounds like we’ll be in a good position to “weather the storm.”

Moving onto the Financial Plan Overview, it says the budget addresses three of the most pressing issues facing the state at the start of 2023. Can you guess what they are? Basing my guesses on the Governor’s playbook and media coverage of the budget, I was way off base. The three most pressing issues: the Metropolitan Transportation Authority’s solvency; the State’s health care system; and caring for asylum seekers coming to the State. I’m pretty sure I would’ve noticed those if they had been part of any of the media stories I scoured.

The overview goes on to state there’s a “comprehensive financial plan to put the MTA on stable financial footing”; “substantial new capital and operating aid for healthcare” and a commission looking at how to improve quality while reducing costs; and “extraordinary funding to local governments that are providing services and assisting with the resettlement process for asylum seekers.” There’s also funding for State of the State priorities like mental health, housing, public safety, and SUNY. The overview ends talking about significant projected budget gaps for 2025, 2026 and 2027 due to reduced tax receipts and without using any reserves.

I’m still stuck on what some could perceive to be mixed messages. So, I went to the Executive Budget Highlights and decided to do some math. Based on investments from largest to smallest, here’s where the spending priorities appear to be:

  1. Students and schools: $34.5 billion
  2. Public transportation: $450 million plus $17.7 billion (Note: These numbers do not include $400 million in operating efficiencies expected from the MTA; generate an additional $800 million by increasing the top rate of the Payroll Mobility Tax; and increase NYC’s share of funding to $500 million; share in licensing fees and annual revenue from three possible casinos)
  3. Childcare: $7.6 billion over four years plus $418.8 million in targeted investments
  4. Climate crisis: $5.5 billion plus 2022 Environmental Bond Act spending of $1.5 billion
  5. Healthcare: $2.34 billion
  6. Assistance to asylum seekers: $1.1 billion
  7. Mental health care: $1 billion multi-year plan
  8. Gun violence & public safety: $787.9 million
  9. Economy: $610 million
  10. Housing: $378.8 million

Then I turned to the 2024 Budget Executive Briefing. Page 15 defines three key initiatives as mental health, affordable housing, and public safety. Okay, I had heard those being among priorities. Then I turned to page 31 talking about ongoing infrastructure investments and see that there’s a $52.1 billion capital program for the MTA from 2020 to 2024. I think that may mean that public transportation bumps students and schools from the #1 spot above.

I decide to go back to where I started, skimming the five-year plan and slow down when I come to the section on local assistance, which indicates two-thirds of state spending goes toward local programs (see pages 46 and 47) where the priorities again appear to be education, healthcare, mental health, transportation, and social services.

So, I hoped my article helped clarify things. Just kidding – it looks like you have your hands full. If you need some extra time to get your arms around the budget and what it means to your municipality, RBT CPAs is here to help. Let our accounting, audit, tax, and financial advisory service professionals assist you so you can focus on other priorities. To find out what we can do for you, give us a call.

Seven Questions Municipalities Should Ask to Prepare for Year-End

Seven Questions Municipalities Should Ask to Prepare for Year-End

After working with multiple New York-based municipalities year after year to close their books and prepare for what’s next, RBT CPA experts have identified seven key questions you should answer to help ensure a smooth process.

  1. Does your interfund activity agree? Interfund activity is the financial interaction between a government’s funds. How activity is treated impacts a financial statement’s accuracy. As noted on the NYS Comptroller Website for Financial Reporting:
    • Interfund Transactions – Quasi-External. Treated and accounted for as revenues, expenditures, or expenses when involving organizations outside of New York. For example: A state agency’s payment to the Office of General Services and Centralized Services for billings.
    • Interfund Transaction – Reimbursement. Recorded as expenditures or expenses of the reimbursing fund and reductions of expenditures or expenses of the fund reimbursed. This excludes interfund receivables or payables that have been set up.
    • Interfund Transfer – Residual Equity Transfer. Nonrecurring or non-routine transfer of equity between funds should be reported as additions to or deductions from the starting Governmental Funds balance; additions to or deductions from contributed capital; or as deductions from Proprietary Funds’ retained earnings. For example: transfer of a discontinued fund’s residual balance to the General Fund or Debt Service Fund.
    • Interfund Transfer – Operating Transfers From/To Other Funds. This includes all other interfund transfers. For example: legally authorized transfers from a fund receiving revenues to the fund expending resources. Loans or advances are not included.
  1. Did you have any new bonding for the year? Be sure to have copies of bonding documents and the amortization schedule available for review.
  2. Have you updated fixed assets for current year additions and deletions? As noted in the NYS Comptroller’s Local Government Management Guide, “Every local government should have a complete up-to-date inventory of capital assets to ensure that both physical control and accountability are maintained over all assets, including lower-cost assets that aren’t reported in financial statements. Some local governments use perpetual inventory records to maintain control over their capital assets. Perpetual inventory records are detailed records that are continually updated as items are added or removed from supply. This inventory system provides officials with direct access to reliable information on current capital assets throughout the year.”
  3. Have you completed all bank reconciliations? Making sure bank statements match your accounting records is not only critical to financial statement accuracy, but also helps detect fraud and/or theft, as well as data entry errors (i.e., wrong amount or duplicate entries). Failure to reconcile accounts is often the subject of audit findings.
  4. Have you reviewed prior year audit entries and proactively entered them for this year?
  5. Are items recorded to accounts receivable (AR) last year, if annual, recorded to AR this year?
  6. Are all bills applicable to prior year recorded to accounts payable (AP)?

For additional information, refer to the training resources available through the NYS Comptroller’s website, as well as the NYS Financial Toolkit for Local Officials.

As always, RBT CPA accounting, tax, audit and advisory professionals are available to answer your questions to ensure your municipality is on the best track for financial reporting and accuracy. Click here to contact us today.

Cannabis Growth & Sales in NY: Where Things Stand

Cannabis Growth & Sales in NY: Where Things Stand

Marijuana Struggling to Sow Roots In New York Amid Hazy Conditions

On March 31, 2021, the Marijuana Regulation and Taxation Act (MRTA) legalized adult-use cannabis in New York. What has happened since then?

By year-end 2021, 90% of New York municipalities agreed to issue dispensary licenses and/or onsite consumption licenses. Most of the remaining 600 municipalities opted to forgo offering both licenses (at least for now; they can opt in in the future). A high number of opt outs were in Dutchess, Jefferson, Nassau, Orange, Steuben, Suffolk, and Westchester counties. Leaders attributed their opt out decision to a lack of comfort with certain parts of the law (i.e., onsite consumption) and lack of regulations issued by New York’s Cannabis Control Board.

By the middle of 2022, the Board issued 162 recreational cultivation licenses. Just this month, 36 retail dispensary licenses were issued. The application process is onerous and some requirements (like having been arrested in New York in the past for a marijuana offense) are being challenged in court.

While the state gets its ducks in a row, New York City has seen an upsurge in sales from trucks, sidewalks, and bodegas – none of which are legal. Still, it’s hard to justify pursuing legal action when one of the requirements for opening a legal cannabis business is a past offense involving marijuana. So, what many have coined “a gray market” has emerged, raising concerns that legitimate cannabis businesses will be at risk before they ever open their doors.

Another concern relates to taxes. Sources estimate the cost for cannabis from legitimate sources will be two times more than what it costs in the gray market, thanks to several taxes.

Excise Taxes

As of April 1, 2022, Article 20-C of the New York State Tax Law imposed a THC potency excise tax – the first in the nation. The excise tax is an amount a retailer pays to a distributor. It equals: $0.005/mg of THC for cannabis flower, $0.008/mg of THC for concentrates, and $0.03/mg of THC for consumables.  In addition, there’s an adult-use excise tax of 13% paid by retailers. Of amounts collected, 9% goes to the state. Of the remaining 4%, 1% goes to the county where the sale took place and 3% is split between the cities, towns, and villages in the county that opted in based on respective cannabis sales.

IRC 280E & 471

For Federal income taxes, IRC 280E governs what expenses are deductible and credits are allowable, while IRC 471 governs inventory rules. To offset IRC 280E, New York’s Governor Hochul enacted Senate Bill S8009 when she signed the 2022-2023 budget into law. As a result, starting January 1, 2023, state cannabis taxpayers will be allowed standard business deductions and credits on state returns (even though IRC 280E bans them on Federal returns).

Franchise Tax

New York businesses are required to pay the highest of business income tax (6.5% to 7.25% or 0 for qualified manufacturers); business capital tax (0.1875% of business capital allocated to New York or 0 for qualified manufacturers); or fixed dollar minimum tax (ranging from $25 to $200,000 or $19 to $3,740 for qualified manufacturers). Note: There are some benefits to being treated as a qualified manufacturer.

Sales Tax

While New York businesses will not collect sales tax on cannabis, sales tax will apply to related products like rolling paper, pipes, and other paraphernalia.

(Some of the taxes referenced in this article may work differently in New York City.)

Beyond taxes, audit expectations are high. As noted in an article published by the New York State Society of Public CPAs (Klimek, Jason. Cannabis Taxes in New York State – How High Is Too High. April 1, 2022), “All of this adds up to a high likelihood of an IRS audit. In 2013, with solely medical cannabis legalized in a few states, the IRS determined that the average per hour recovery for IRS work in mainstream businesses was $493. For cannabis business, the average per hour recovery was $1,375.”

No doubt, 2023 will be a big year for legitimate cannabis businesses in New York. If you need assistance with related accounting, taxes, or audits, please let us know. RBT CPAs is one of the largest firms in the Hudson Valley. We believe we succeed when we help you succeed. Give us a call to learn more about what we can do for you.

Lease Accounting Standards Reminder

Lease Accounting Standards Reminder

Is your municipality stretched a little thin trying to meet GASB 87 requirements, much less GASB 96? Take heart – you’re likely not alone, but there is light at the end of the tunnel.

In a survey conducted at the end of May/beginning of June for Visual Lease Data Institute’s GASB readiness study, 44% of government survey participants indicated they weren’t completely prepared for GASB 87 and only 18% felt they had moved onto the maintenance phase. (Hopefully, a lot more are in the maintenance stage now.)

Beyond-stretched resources embarking on yet another learning curve for new lease policies, protocols, and technology seem to have little left in the tank to comply with GASB 96, which focuses on how government organizations account for Subscription-Based Information Technology Agreements (SBITAs) for fiscal years that start after June 15, 2022. In essence, you must do the same thing for software agreements as you did for leases. Hopefully, the second time around should be a bit easier.

If you’re finishing up your GASB 87 compliance efforts, here are resources that may help:

Changes Ahead for Governmental Lease Accounting by RBT CPAs

Lease Accounting Standard Changes FAQ by RBT CPAs

NYS Resources on GASB Standards

NYS: How to Implement GASB 87

NYS Annual Financial Reports Filing Deadlines

The Complete Guide to GASB Lease Accounting by Governing.com

RBT CPAs has partnered with Trullion – a lease management software company – to use modern technology to streamline the process for initial GASB 87 compliance and ongoing maintenance. If you are interested in learning more about how this may benefit your organization, give us a call. If you have any questions or need clarification, please don’t hesitate to reach out to your RBT CPAs contact.