IT & Security Checkup · SAMPLE
Checkup Report: Example Tax Office (fictional)
Prepared for: Jane Sample, Example Tax Office (example.com) · Users: 6 · Date: SAMPLE · Prepared by: Veteran Pushing Forward LLC
Summary
3 high, 3 medium, and 2 low-priority findings. Fixing the top three would reduce the most risk to client tax data.
Findings, ranked by priority
| # | Priority | Finding | Recommended fix |
|---|---|---|---|
| 1 | High | MFA not enabled for 4 of 6 Microsoft 365 accounts (e.g. jane.sample@example.com). | Turn on MFA for all users; block legacy sign-in. |
| 2 | High | Tax software backups stored only on the office server; no off-site copy; never restore-tested. | Add encrypted off-site backup; test a restore monthly. |
| 3 | High | No written information security plan (WISP). | Build a WISP built to address the FTC Safeguards Rule and IRS Pub 4557. |
| 4 | Medium | 2 laptops without full-disk encryption (FRONTDESK-PC-01, PREPARER-LT-02). | Enable BitLocker; store recovery keys centrally. |
| 5 | Medium | Former employee account (john.doe@example.com) still active. | Disable it; add an offboarding checklist. |
| 6 | Medium | Client documents sent as plain email attachments. | Use a client portal or encrypted email. |
| 7 | Low | Windows updates 45+ days behind on BACKOFFICE-PC-03. | Turn on automatic updates. |
| 8 | Low | Guest Wi-Fi (192.0.2.0/24) shares the office network with staff PCs (198.51.100.0/24). | Separate guest Wi-Fi. |
Next steps
Items 1, 2, and 5 can be fixed within a week. Item 3 is addressed by the WISP engagement.
This is a SAMPLE with fictional, redacted data, shown to illustrate the report format. It is not a real client and not a guarantee of any outcome.