Your required security plan, done right and actually in place.
Tax preparers are required to keep a written information security plan (WISP). I write it with you, put the safeguards behind it, and help you keep it current every year.
Why it matters
The FTC Safeguards Rule treats tax preparers as financial institutions, and the IRS asks preparers to confirm they have a written security plan when renewing their PTIN. The IRS publishes a template, Publication 5708, but a template alone doesn't protect your clients' data.
Most small offices have a plan on paper, or none at all, with safeguards that were never set up. That's a risk to your clients, your reputation and your practice.
What's included
- A written plan based on IRS Publication 5708, tailored to your office
- Multi-factor sign-in on email, tax software and remote access
- Encryption of client data on computers and in transit
- Backups that are tested and protected from ransomware
- Staff security training, with records
- An incident response plan: what to do and who to call
- An annual review before tax season
From template to real protection
A written security plan isn't optional.
If you prepare returns, you're expected to have a Written Information Security Plan, or WISP.
- The IRS asks you to confirm it when you renew your PTIN
- The FTC Safeguards Rule treats tax preparers as financial institutions
A template in a drawer protects no one.
Most small offices have a plan on paper, or none at all.
- The template was downloaded but never filled in
- The safeguards it describes were never set up
- That's a risk to your clients, your reputation and your practice
It starts in the off-season.
Tax season is no time for IT projects. The work happens May through December.
- A walkthrough of your office, computers and tax software
- How client data is stored, sent and shared
The plan gets written. The safeguards get set up.
Your plan is written with you and tailored to your office, then the missing protections are put in place.
- First column: it's in your written plan
- Second column: it's really working in your office
Reviewed every fall, so you're ready for January.
A yearly review and update, plus help if anything goes wrong. One fixed price, quoted by office size before any work starts.
This service covers technical safeguards and documentation. It isn't legal advice.
Built around your calendar
Tax season is no time for IT projects. Setup happens in the off-season, May through December, with a short review each fall so you're ready for January.
Review
A walkthrough of your office, computers, software and how client data is stored and shared.
Write & fix
The plan is written with you, and the missing safeguards are put in place.
Keep current
Yearly review and updates, plus help if anything goes wrong.
This service covers technical safeguards and documentation. It isn't legal advice; your office remains responsible for its compliance.
Not a tax office? See cybersecurity for any small business.
Common questions
Are tax preparers required to have a written information security plan?
Yes. The FTC Safeguards Rule treats tax preparers as financial institutions, and the IRS asks preparers to confirm they have a written information security plan (WISP) when renewing their PTIN.
Is the IRS template, Publication 5708, enough?
It is a good starting point, but a template alone doesn't protect client data. The plan needs to fit your office, and the safeguards it describes, such as multi-factor sign-in, encryption and tested backups, need to be in place.
How much does a WISP cost?
It is a fixed price, quoted by office size before any work starts.
When does the work happen?
Setup happens in the off-season, May through December, with a short review each fall so you're ready for January.
Is this legal advice?
No. This service covers technical safeguards and documentation. Your office remains responsible for its compliance.
Not sure where to start?
Book a free 30-minute IT checkup call. We'll talk through what's working, what isn't, and whether I can help. No sales pitch.