Instant document
Written Information Security Plan (WISP) for Tax & Accounting Firms, Customized in Minutes
The written data security plan tax professionals are required to have, organized around the FTC Safeguards Rule and IRS guidance. Answer a few questions, pay once and it’s ready instantly.
Also searched as: WISP template for tax preparers · written information security plan · IRS data security plan · FTC Safeguards Rule WISP · WISP for accounting firms
- Price
- $249
- Ready
- Instantly, on screen and by email
- Format
- Word & PDF
- You own it
- Edit it any way you like
What you get
- Your Qualified Individual and their responsibilities
- A risk assessment table started from your answers
- Safeguards for access, encryption, two-step sign-in, disposal and remote work
- Testing, monitoring, staff training and service-provider oversight
- An incident response section with the FTC, IRS and state reporting steps
- An annual report to the firm’s leadership
- A staff acknowledgement page
What’s inside
The sections in your document. Anything that doesn’t apply to your answers is left out.
- Purpose
- Information this plan protects
- Qualified Individual
- Risk assessment
- Safeguards
- Testing and monitoring
- Staff training
- Service providers
- Incident response
- Annual report
- Keeping this plan current
- Staff acknowledgement
Answer a few questions
It takes a few minutes. Anything optional you skip is left as a clear blank to fill in later.
- 1
Answer a few questions
About your business, your systems and how you work. It takes a few minutes, and anything you skip is left as a clear blank to fill in.
- 2
Pay securely
Checkout is handled by Stripe. We never see your card number.
- 3
Get it instantly
Your document appears on screen as soon as payment goes through, ready to download for Word or save as a PDF, and the link is emailed to you.
Questions
Do tax preparers need a written information security plan?
Yes. Tax and accounting firms are covered by the FTC Safeguards Rule, which requires a written information security program, and the IRS reminds every tax professional that federal law requires a written data security plan.
What does the plan cover?
The elements of the FTC Safeguards Rule: a Qualified Individual, a risk assessment, safeguards such as access controls, encryption, two-step sign-in and secure disposal, testing and monitoring, staff training, service-provider oversight, an incident response plan and an annual report.
Isn’t there a free IRS template?
Yes, IRS Publication 5708 includes a sample. Ours is filled in from your answers: your Qualified Individual, your software, where your client data lives, your remote work and your current safeguards, with action items where something needs attention.
How fast do I get it?
Right away. It appears on your screen as soon as your payment goes through, and the link is emailed to you so you can get it again later.
Does having this plan make us compliant?
The plan is the required written part. Compliance also depends on actually doing what it says, like turning on two-step sign-in and training staff, so the plan lists action items for anything that isn’t in place yet.
More instant documents
AI Acceptable Use Policy
A written AI policy for your team: approved tools, what never goes into AI, checking AI’s work and customer-facing AI.
Cybersecurity Incident Response Plan
A written plan for hacked email, ransomware, lost devices and data breaches: who does what, the first hour and every step after.