How CPA firms can protect themselves from lawsuits