There are two things called remote work in accounting firms, and only one of them functions.
Remote-allowed means the firm operates as it always did and permits people to be elsewhere. Decisions happen in a room, the informal coordination happens at desks, and the people who are not there receive a summary afterward. Remote staff in such a firm are structurally second-class — they are less informed, less considered for good work, and promoted less — and the firm concludes that remote work does not suit accounting.
Remote-first means the default is that no conversation depends on physical presence. Decisions are documented, coordination is written, and a person in the office has no informational advantage over a person who is not.
The distinction is not cultural garnish. It determines whether the arrangement works, and a firm unwilling to make it should be honest that it is running a hybrid office rather than a remote firm.
For a CPA firm this comes before anything else, because client data now leaves a controlled building.
A written information security plan is a requirement, not a nicety, for tax return preparers — and it has to describe an environment where work happens in homes. Confirm the current requirement and its required contents; the point here is that a remote firm cannot satisfy it with a document written for an office.
The operational build:
Firm-controlled devices. Personal machines used for client work are the single largest exposure, and "we ask people to be careful" is not a control. Where personal devices must be used, the access has to be through a controlled environment rather than local software.
No local storage of client data. Everything in the firm's systems, nothing on desktops or in personal cloud accounts. This is also what makes the retention and access obligations satisfiable.
Multi-factor authentication everywhere, without exception for partners.
Controlled network access — a managed connection rather than reliance on home network hygiene, with an explicit position on public networks.
Encryption on devices and in transit.
Screen and workspace privacy, including the household question: who else can see the screen, who can hear a client call, and whether a smart speaker is in the room.
A printing and physical document position. Preferably no home printing of client information; where unavoidable, a defined handling and destruction process. This is where firms are weakest and where the exposure is unglamorous and real.
Physical document intake, which remote firms must solve deliberately — a scanning location, a mail handling process, and a rule against original documents accumulating in someone's spare room. Client records are the firm's responsibility wherever they physically sit.
Offboarding that actually revokes access on the day, which is harder remotely because there is no moment of handing back a pass.
And the policy layer from our post on technology governance, plus the practitioner obligations in tax practitioner regulations, penalties, and security and the continuity planning in cybersecurity and keeping payroll processing going during an outage.
The section most firms discover late, and the most valuable one here.
A staff member working from another state triggers, simultaneously:
Payroll withholding in that state, and possibly reciprocity mechanics — per our post on reciprocity agreements, including the certificate requirement and the convenience-of-the-employer rules that can complicate it.
Unemployment insurance allocation under its own four-factor test, which often points to a different state than withholding does.
Income tax nexus for the firm in that state, and potentially sales tax nexus on any taxable services — see our post on nexus rules and the sales and use tax training catalog. A remote employee is physical presence.
Employment law — that state's minimum wage, paid leave, sick leave, final pay timing, and pay statement requirements. See the state sick pay law review.
Expense reimbursement mandates, since several states require reimbursement of necessary business expenses as a matter of wage and hour law — which for a remote worker means internet, phone, and equipment, and which is a wage claim rather than a tax issue. Structure it through an accountable plan per our post on reimbursement rules.
Firm registration and licensure questions, per our post on multi-state practice — because individual practice privilege does not resolve whether the firm must register, particularly where attest work is involved.
None of these is difficult in isolation. What breaks firms is that a partner hires someone in a new state in a week, and nobody runs the list. Make the list a hiring gate: before an offer goes out in a state where the firm has no presence, someone confirms all six.
In an office, coordination happens informally — you can see who is at their desk, ask a question across a room, and notice that a file has been sitting for three days. Remotely, all of that disappears, and nothing replaces it by default.
Which means the workflow system stops being administrative and becomes the firm's operating mechanism:
One system as the source of truth for status. If status lives in people's heads or in email, remote work degrades into a series of "where is this" messages.
Explicit stage definitions, so "in review" means the same thing to everyone.
Visible queues and assignments, so nobody waits on something nobody knew they had.
Documents in the document system, never as email attachments — which is both a workflow and a security requirement.
Time and deadline visibility without anyone asking.
A firm that goes remote without this substitutes messaging for coordination, and messaging does not scale.
Two related costs, and the second is the real one.
Review gets harder. The over-the-shoulder correction disappears, and what replaces it must be deliberate: written review notes specific enough to act on, a defined turnaround expectation, and a mechanism for the reviewer and preparer to actually talk when a point is substantive. And per our post on firm capacity, review remains the binding constraint — remote work does not relieve it and can worsen it by making review slower.
Junior development is the largest genuine cost of remote work in a CPA firm, and it should be stated plainly rather than managed with optimism.
Juniors learn by ambient exposure: overhearing a partner handle a client call, listening to a manager reason through a problem, seeing how a senior reacts to something odd, absorbing what normal looks like. None of that happens remotely by accident, and a firm that does not replace it produces technically narrow staff who cannot yet exercise judgment.
What actually replaces it, imperfectly:
Deliberate paired work — a junior and a senior working the same file simultaneously, talking, on a call that is not a meeting.
Recorded walkthroughs of engagements, reviews, and decisions, kept as a library.
Juniors on client calls as observers, routinely, which costs nothing and is the closest substitute for overhearing.
Structured technical training on a schedule, since the informal version is gone — through the CPA training and audit training courses catalogs and the certificate programs where a defined curriculum helps.
A named mentor with a standing recurring conversation, because a junior with no one to ask a small question will guess.
Explicit permission to ask, repeated. The cost of interrupting feels higher remotely, so juniors ask less, which is exactly backwards.
Otherwise everyone applies their own, and the mismatch reads as rudeness or neglect.
Response-time expectations by channel, so nobody is waiting on a message the recipient treats as low priority.
Written-first for decisions, with a durable record rather than a conclusion someone remembers.
Meeting discipline — an agenda, a purpose, notes, and a bias against meetings that could be documents. Remote firms drift into meeting saturation because meetings feel like connection.
Working-hours expectations, particularly across time zones, and an explicit position on after-hours messages. For non-exempt staff this is not merely cultural: after-hours work is compensable, per our post on wage and hour self-audits, and remote work has made unrecorded time a leading exposure.
Availability signalling that people actually maintain.
The upside, and it is substantial enough to justify the work above.
Geography stops constraining recruitment. A firm that cannot find staff locally can hire where the people are — which is the binding constraint for most firms, and it pairs directly with the national reach a specialized practice gains per our post on building a niche.
Three adjustments it requires:
Hire for written communication and self-direction, explicitly and by testing for them rather than asking about them. A strong technician who cannot write clearly is a harder hire remotely than in an office.
Onboarding must be designed, not absorbed. A new joiner in an office learns by proximity for three months; remotely, someone has to have built the equivalent — a structured first-30-days, a named buddy, scheduled introductions, and a checklist for equipment and access that works before day one rather than during it.
Seasonal staff are harder and need the same treatment compressed — see our post on seasonal hiring. A temporary preparer onboarded badly and remotely produces work that costs more to review than it saves.
Worth saying, because it is the objection partners raise most and it is the weakest one.
Most clients are indifferent to where their accountant sits, and many prefer video meetings to travelling to an office. The exceptions are real but narrow: clients who value the in-person relationship, clients who deliver physical documents, and clients whose own culture reads remote work as less serious.
Three things to have ready: a document intake answer that does not depend on an office; a meeting-in-person option for the clients who want one, even if it is a booked space rather than a permanent office; and a consistent professional video setup for everyone client-facing, because the firm's presentation is now the sum of its staff's backgrounds and audio.
Because you cannot observe presence and should not try.
Define what output looks like by role and measure it: work completed, quality, deadlines met, client feedback, and — for chargeable roles — the same realization measures the firm already uses.
Do not install monitoring software. Beyond the privacy and employment law questions, it signals distrust, it measures activity rather than output, and it is the intervention most likely to cause the people you want to keep to leave.
Address underperformance directly and early, since the office's ambient signals that something is wrong are absent — a struggling person can be invisible remotely for a long time, which is a failure of management rather than of the arrangement.
The summary for a firm building this: decide whether you are remote-first or remote-allowed and say so honestly, because the second one will not work. Then treat three things as non-negotiable — a security program that describes homes rather than an office, a workflow system that is the single source of truth, and a deliberate replacement for the ambient learning your juniors no longer get. And make the six state obligations a hiring gate, because the partner making an out-of-state offer this week is not going to think of them.
Remote-allowed keeps the office as the centre and permits people to be elsewhere, so decisions and informal coordination happen in a room and off-site staff are structurally less informed, less considered for good work, and promoted less. Remote-first means no conversation depends on physical presence — decisions are documented and coordination is written, so being in an office confers no informational advantage.
A written information security plan that actually describes work performed in homes; firm-controlled devices rather than personal machines; no local storage of client data; universal multi-factor authentication; managed network access; encryption; a screen and workspace privacy position covering households; a printing and physical document rule; a document intake process that does not depend on an office; and offboarding that revokes access the same day.
Six things at once: payroll withholding and any reciprocity mechanics, unemployment insurance allocation under its own test, income and possibly sales tax nexus for the firm since a remote employee is physical presence, that state's employment law, expense reimbursement mandates where they exist, and firm registration or licensure questions. Make confirming all six a gate before an offer goes out.
Junior development. Juniors learn by overhearing client calls, listening to managers reason through problems, and absorbing what normal looks like — none of which happens remotely by accident. Replacing it requires deliberate paired work, recorded walkthroughs, juniors on client calls as observers, structured technical training, a named mentor with a standing conversation, and repeated explicit permission to ask.
Because informal coordination disappears. In an office you can see who is available, ask across a room, and notice a file sitting untouched. Remotely, nothing replaces that by default, so the workflow system becomes the operating mechanism: one source of truth for status, explicit stage definitions, visible queues, documents in the document system, and deadline visibility without anyone asking.
By output, defined per role and measured — work completed, quality, deadlines met, client feedback, and existing realization measures for chargeable roles. Monitoring software is the wrong answer: it raises privacy and employment law questions, measures activity rather than results, and is the intervention most likely to lose the people worth keeping. Underperformance does need addressing early, since the office's ambient signals are gone.


