I'm sure your question has already been answered correctly.  That said, I share office space with accountants and have worked in IT for more than 30 years.  The current minimum configuration we use for any profession that requires compliance and security is:

Windows 11 Professional

12th generation Intel CPU

512G SSD Storage

16G Ram Memory

We also recommend, (not mandatory but highly recommended), a local encrypted backup process in addition to encrypted cloud backup.  This can sometimes be accomplished by adding a second SSD to a new laptop which is then offloaded to a NAS (Network Attached Storage) device as well as a secure cloud based storage facility.  We use cloud managed corporate routers and separate WiFi access points to simplify troubleshooting and provide a higher level of stability and security.  We use a corporate level anti-virus and anti-malware package.  Additionally, (and we believe this is important), is to create local logon to devices separate from Microsoft logons.  This is done during initial setup as people sometimes need full access to "everything" separate from their Microsoft account, and this is especially true in the event of a major device failure.  BitLocker is also important and the professional version is required in order to utilize BitLocker.