An accountancy firm is a point of concentration
A firm brings together, in one information system, the balance sheets, the bank journals, the payslips and the bank details of all its clients. That concentration is what makes it valuable, and what makes it a target with an exceptional cost-benefit ratio: one compromised access opens every organisation on the books, and impersonating the firm's address opens the door to each of them, since clients trust it by construction. The courses handle that exposure with the measures that actually reduce it: two-factor authentication, named accounts limited to the files worked on, an access review at every team change, an offline backup that has been tested.