Contemporary technology allows us a new look at the activities and sub-activities of a business enterprise. It is essential that a business entity adjusts and accepts the development of technology and implements it into its enterprise. This paper is based on cloud accounting as a relatively new form of business information systems and its security aspects. Accounting is a discipline that deals with the records and analysis of business processes in a business enterprise. The Accounting Information System (AIS) is the subsystem of the overall information system, which is the basic source of information on the business of the enterprise. The use of accounting information systems greatly facilitated business operations due to easier access to information as well as the ability to analyze data necessary for further business decision making. When we talk about cloud accounting we can define it as keeping accounting over the Internet through leasing software, servers, and other IT equipment from another business entity. Its main advantages over the traditional approach are lower investment and maintenance costs, system availability and flexibility, speed and data processing, system compliance, ease and efficiency, and reduction of data destruction risks. The main disadvantage of cloud computing is the security risk and the risk of losing confidential information. Managing security risks requires complex work and needs to be done professionally. In the management of security risks, we include the activities of choosing the security policy, assessing the security risk, reducing the security risk and evaluating the security risk. Security threats are defined as phenomena that may have an adverse effect on the information systems as well as the business system itself by influencing and acting on certain information resources. Therefore, it is necessary to develop and implement protection measures and procedures that reduce the security risks. We can divide them into organizational, physical and program measures. Responsibility for the security of a business entity is the same in the hands of users as well as service providers. Education is the most important part because the most common mistakes of human error are ignorance and neglect.