A written security plan your firm will actually follow

The FTC Safeguards Rule (16 CFR Part 314) covers tax and accounting firms and requires a written information security program. The IRS calls it a Written Information Security Plan, or WISP, and publishes a template in Pub 5708. The PTIN renewal form asks about it, and PTINs expire December 31, so renewal season is a good time to get it done. We help you write a plan that fits your office instead of a template nobody reads.

What you get

• A WISP built around the FTC Safeguards Rule and the IRS guidance for tax professionals, including Pub 5708
• A risk assessment and a check of the basics the rule names, like MFA and encryption
• A named qualified individual to own the plan, and a schedule to review it
• Your breach steps written down, including the FTC notice the rule requires within 30 days for a breach affecting 500 or more people
• A short staff walkthrough

Price

Fixed fee, scoped on a short call.